CVE-2023-35998

Summary

CVE-2023-35998 is a vulnerability affecting the Insider Threat Management Server. This issue stems from a missing authorization check in several SOAP endpoints, making it possible for an attacker on a neighboring network to unauthorizedly read and write objects. To exploit this weakness, the attacker must initially obtain a legitimate agent authentication token. Versions of the Insider Threat Management Server prior to 7.14.3 are susceptible to this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.