VYPR
← All advisories
High severity7.4NVD Advisory· Published Apr 6, 2021· Updated Jun 17, 2026

CVE-2021-27899

CVE-2021-27899

Description

The Proofpoint Insider Threat Management Agents (formerly ObserveIT Agent) for MacOS and Linux perform improper validation of the ITM Server's certificate, which enables a remote attacker to intercept and alter these communications using a man-in-the-middle attack. All versions before 7.11.1 are affected. Agents for Windows and Cloud are not affected.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Proofpoint/Insider Threat Management2 versions
    cpe:2.3:a:proofpoint:insider_threat_management:*:*:*:*:*:linux:*:*+ 1 more
    • cpe:2.3:a:proofpoint:insider_threat_management:*:*:*:*:*:linux:*:*range: >=7.9.0,<7.9.3
    • cpe:2.3:a:proofpoint:insider_threat_management:*:*:*:*:*:macos:*:*range: >=7.9.0,<7.9.3
  • Proofpoint/Insider Threat Management Agentsdescription
  • Proofpoint/Insider Threat Management Agentllm-fuzzy
    Range: <7.11.1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.