PT-2021-9162
CVE-2020-10655
·
تاريخ النشر
2021-01-06
·
تاريخ التحديث
2021-01-08
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Proofpoint Insider Threat Management Server versions prior to 7.9.1
Description
The issue is caused by improper deserialization in the ITM application server's WriteWindowMouse API, allowing an anonymous remote attacker to execute arbitrary code with local administrator privileges.
Recommendations
For versions prior to 7.9.1, update to version 7.9.1 or later to resolve the issue.
As a temporary workaround, consider restricting access to the WriteWindowMouse API until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾