CVE-2021-40842
Critical
Description
Proofpoint Insider Threat Management Server contains a SQL injection vulnerability in the Web Console. The vulnerability exists due to improper input validation on the database name parameter required in certain unauthenticated APIs. A malicious URL visited by anyone with network access to the server could be used to blindly execute arbitrary SQL statements on the backend database. Version 7.12.0 and all versions prior to 7.11.2 are affected.
SeverityCritical
CVSS9.8
Exploit probability—
ProductProofpoint Insider Threat Management Server
PublishedOct 13, 2021
First seenOct 13, 2021
How to fix
Update
- proofpoint insider_threat_management_server7.11.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| proofpoint insider_threat_management_server | v < 7.11.2, 7.12.0 | 7.11.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.