CVE-2023-4828
CVSS 3.1 Score 5.4 of 10 (medium)
Details
Summary
CVE-2023-4828 is a vulnerability affecting Insider Threat Management (ITM) Server versions prior to 7.14.3.69. An attacker who manages to obtain valid agent credentials and hostname can exploit an improper check for exceptional conditions. This allows the attacker to modify the server configuration of any registered agent, redirecting all future communications to their chosen URL. The potential consequences include disclosure, alteration, or deletion of sensitive data related to personally identifiable information (PII) and intellectual property monitored by the agent. This could lead to significant data breaches and potential privacy violations.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions