Proofpoint Insider Threat Management Server Authentication Bypass Vulnerability Allowing Agent Unregistration

An authentication bypass vulnerability has been identified in Proofpoint Insider Threat Management (ITM) Server versions prior to 7.17.2. This vulnerability allows unauthenticated users on an adjacent network to unregister agents when the number of registered agents exceeds the licensed limit. Exploiting this vulnerability prevents the server from receiving new events from the affected agents, leading to a partial loss of integrity and availability, without impacting confidentiality.

Impact

Exploitation of this vulnerability causes a partial loss of integrity and availability by disrupting the server's event reception from affected agents, while confidentiality remains unaffected.