CVE-2023-4801
CVSS 3.1 Score 7.5 of 10 (high)
Details
Summary
CVE-2023-4801 is an improper certification validation vulnerability in the Insider Threat Management (ITM) Agent for MacOS. This vulnerability allows an anonymous actor on an adjacent network to establish a man-in-the-middle position between the agent and the ITM server after the agent has registered. The vulnerability affects all versions prior to 7.14.3.69 of the ITM Agent for MacOS, while agents for Windows, Linux, and Cloud are unaffected. To remediate this vulnerability, organizations should update their ITM Agent for MacOS to version 7.14.3.69 or later. The potential danger posed by this vulnerability is high, as it could lead to unauthorized access and interception of sensitive data transmitted between the agent and server within an organization's network.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions