CVE-2023-4801CWE-295

ITM MacOS Agent Improper Certificate Validation

High · published September 13, 2023

CVSS v3.1
7.5
EPSS
0%
Percentile
15.9
In the wild
Unconfirmed
What it is

An improper certification validation vulnerability in the Insider Threat Management (ITM) Agent for MacOS could be used by an anonymous actor on an adjacent network to establish a man-in-the-middle position between the agent and the ITM server after the agent has registered. All versions prior to 7.14.3.69 are affected. Agents for Windows, Linux, and Cloud are unaffected.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00253 · 15.9th percentile
Weakness
CWE-295 · Improper Certificate Validation
Published
2023-09-13T15:14Z
EPSS history
Timeline
  • 13 SEP 15:14Z
    ITM MacOS Agent Improper Certificate Validation
    cvelistv5