CVE-2023-2818CWE-281

ITM Windows Agent Insecure Filesystem Permissions

Medium · published June 27, 2023

CVSS v3.1
5.5
EPSS
0%
Percentile
4.2
In the wild
Unconfirmed
What it is

An insecure filesystem permission in the Insider Threat Management Agent for Windows enables local unprivileged users to disrupt agent monitoring. All versions prior to 7.14.3 are affected. Agents for MacOS and Linux and Cloud are unaffected.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00154 · 4.2th percentile
Weakness
CWE-281 · Improper Preservation of Permissions
Published
2023-06-27T14:29Z
EPSS history
Timeline
  • 27 JUN 14:29Z
    ITM Windows Agent Insecure Filesystem Permissions
    cvelistv5