PT-2023-21613 · Unknown · Insider Threat Management Agent For Windows

Published 2023-06-27 · Updated 2023-07-06 · CVE-2023-2818

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Insider Threat Management Agent for Windows versions prior to 7.14.3

Description The issue is related to an insecure filesystem permission that allows local unprivileged users to disrupt agent monitoring.

Recommendations For versions prior to 7.14.3, update to version 7.14.3 or later to resolve the issue.

Fix

Improper Preservation of Permissions

Weakness Enumeration

CWE-281

Related Identifiers

CVE-2023-2818

Affected Products

Insider Threat Management Agent For Windows

References · 3

• https://osv.dev/vulnerability/CVE-2023-2818 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-2818 · Security Note
• https://proofpoint.com/us/security/security-advisories/pfpt-sa-2023-005 · Vendor Advisory