CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 4.3. See the original NVD description below for full technical details.
CVE
CVE-2023-36002
Severity
MEDIUM
CVSS
4.3
EPSS
0.25%
Original NVD Description
A missing authorization check in multiple URL validation endpoints of the Insider Threat Management Server enables an anonymous attacker on an adjacent network to smuggle content via DNS lookups. All versions before 7.14.3 are affected.
Related CVEs
Other vulnerabilities affecting the same vendor(s)