CVE-2020-10657

Katalog CVE

CVSS 7.2 · High EPSS 2,6%

Kerentanan Deserialization of Untrusted Data pada proofpoint insider threat management server. Skor CVSS 3.1 7.2 (High) menurut NVD.

Deskripsi (NVD)

The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains a vulnerability in the ITM web console's ImportAlertRules feature. The vulnerability allows a remote attacker (with admin or config-admin privileges in the console) to execute arbitrary code with local administrator privileges. The vulnerability is caused by improper deserialization.

Rincian

Terbit di NVD

6 Januari 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.2 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-502: Deserialization of Untrusted Data

EPSS (30 hari)

2,6% peluang dieksploitasi; lebih tinggi dari 85,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2020-0003 advisory vendor
• https://www.proofpoint.com/us/blog product