Access Control

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) is missing an authorization check on several pages in the Web Console. This enables a view-only user to…CVE-2021-27900Proofpoint · 2.5% likely

   CWE-862

2. ITM Server Missing Authorization for Agent ConfigCVE-2023-36000Proofpoint · CVSS 6.5 · 0.3% likely

   CWE-862

3. ITM Server Missing Authorization for URL validationCVE-2023-36002Proofpoint · CVSS 4.3 · 0.3% likely

   CWE-862

4. ITM Server Missing Authorization in SOAP EndpointsCVE-2023-35998Proofpoint · CVSS 4.6 · 0.2% likely

   CWE-862

5. Proofpoint Enterprise Protection Local Privilege EscalationCVE-2022-46334Proofpoint · CVSS 7.8 · 0.2% likely

   CWE-269

6. ITM Windows Agent Insecure Filesystem PermissionsCVE-2023-2818Proofpoint · CVSS 5.5 · 0.2% likely

   CWE-281

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.