CVE-2023-36002

Summary

CVE-2023-36002 is a vulnerability affecting the Insider Threat Management Server. The issue stems from a missing authorization check in several URL validation endpoints, which allows an unauthenticated attacker on a nearby network to manipulate DNS lookups through smuggling content. Servers running versions prior to 7.14.3 are at risk of exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.