CVE-2021-27899 Weak cryptography in n/a
Improper certificate validation in Proofpoint ITM Agents allows remote attackers to intercept and alter communications via man-in-the-middle attacks.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-27899?
CVE-2021-27899 is a high-severity vulnerability in n/a, published on 6 Apr 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The Proofpoint Insider Threat Management Agents (formerly ObserveIT Agent) for MacOS and Linux perform improper validation of the ITM Server's certificate, which enables a remote attacker to intercept and alter these communications using a man-in-the-middle attack. All versions before 7.11.1 are affected. Agents for Windows and Cloud are not affected.
Weakness: CWE-295
Which versions are affected by CVE-2021-27899?
It affects 1 product.
Products include Proofpoint Insider Threat Management.
How do I fix CVE-2021-27899?
No fix has been published for CVE-2021-27899 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-27899 being exploited?
There is no known exploitation of CVE-2021-27899 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-w2jc-6hpr-7cwc.