CoreCVE
Back

LOW

Insider Threat Management (ITM) Server versions prior to 7.17.2 contain an authentication bypass vulnerability that allows unauthenticated users on an adjacent network to perform agent unregistration when the number of registered agents exceeds the licensed limit

Published Nov 3, 2025

Description

Insider Threat Management (ITM) Server versions prior to 7.17.2 contain an authentication bypass vulnerability that allows unauthenticated users on an adjacent network to perform agent unregistration when the number of registered agents exceeds the licensed limit. Successful exploitation prevents the server from receiving new events from affected agents, resulting in a partial loss of integrity and availability with no impact to confidentiality.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-306

Missing Authentication

References (2)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner Proofpoint
Published Nov 3, 2025
Updated Nov 3, 2025
Reserved Aug 4, 2025
Link CVE-2025-8558

CISA Vulnrichment

Updated Nov 3, 2025

NVD

Status Analyzed
Modified Jun 17, 2026
Link CVE-2025-8558

Red Hat

No data

ENISA EUVD

Assigner Proofpoint
Published Nov 3, 2025
Updated Nov 3, 2025
Link EUVD-2025-37519

GitHub

No data