| Package | Affected versions | Patched versions |
|---|---|---|
| insider threat management | ≥ 7.10.0, < 7.10.3≥ 7.11.0, < 7.11.1≥ 7.9.0, < 7.9.3 | 7.10.37.11.17.9.3 |
The Proofpoint Insider Threat Management Agents (formerly ObserveIT Agent) for MacOS and Linux perform improper validation of the ITM Server's certificate, which enables a remote attacker to intercept and alter these communications using a man-in-the-middle attack. All versions before 7.11.1 are affected. Agents for Windows and Cloud are not affected.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free