Ly1G3

**Name of the Vulnerable Software and Affected Versions** Proofpoint Enterprise Protection (PPS/POD) versions 8.20.0 and below **Description** The webutils in Proofpoint Enterprise Protection contain a vulnerability that allows an authenticated user to execute remote code through 'eval injection'. **Recommendations** For versions 8.20.0 and below, update to a version above 8.20.0 to resolve the issue. As a temporary workaround, consider restricting access to the webutils to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Proofpoint Enterprise Protection (PPS/POD) versions 8.20.0 and below **Description** The webservices in Proofpoint Enterprise Protection contain a vulnerability that allows an anonymous user to execute remote code through 'eval injection'. Exploitation requires network access to the webservices API, but such access is a non-standard configuration. **Recommendations** For versions 8.20.0 and below, consider restricting access to the webservices API to minimize the risk of exploitation. As a temporary workaround, consider disabling the eval injection functionality until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Cisco Secure Email Gateway (ESA) and Cisco Secure Email and Web Manager (SMA) (affected versions not specified) **Description** A vulnerability in the Web UI and administrative CLI of the affected systems could allow an authenticated remote or local attacker to escalate their privilege level and gain root access. The attacker must have a valid user credential with at least a privilege of operator. The vulnerability is due to the processing of a specially crafted SNMP configuration file. An attacker could exploit this vulnerability by authenticating to the targeted device and uploading a specially crafted SNMP configuration file that, when uploaded, could allow for the execution of commands as root. This could allow the attacker to gain root access on the device. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Cisco Secure Email Gateway (affected versions not specified) **Description** The issue is due to improper input validation in the CLI, allowing an authenticated, remote attacker to execute arbitrary commands by injecting operating system commands into a legitimate command. A successful exploit could allow the attacker to escape the restricted command prompt and execute arbitrary commands on the underlying operating system. The attacker would need valid Administrator credentials to exploit this issue. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Proofpoint Enterprise Protection (PPS/PoD) versions 8.19.0 and earlier **Description** The issue allows the `pps` user to escalate to root privileges due to unnecessary permissions. **Recommendations** For versions 8.19.0 and earlier, update to a version above 8.19.0 to resolve the issue. As a temporary workaround, consider restricting the permissions of the `pps` user to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Proofpoint Enterprise Protection (PPS/PoD) versions 8.19.0 and below **Description** The admin user interface in Proofpoint Enterprise Protection contains a command injection issue that allows an admin to execute commands beyond their allowed scope. **Recommendations** For versions 8.19.0 and below, consider restricting access to the admin user interface until a fix is available. As a temporary workaround, limit the scope of commands that can be executed by admins to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Proofpoint Enterprise Protection (PPS/PoD) versions 8.19.0 and below **Description** The Admin Smart Search feature in Proofpoint Enterprise Protection contains a stored cross-site scripting issue that allows an anonymous email sender to gain admin privileges within the user interface. **Recommendations** For versions 8.19.0 and below, update to a version above 8.19.0 to resolve the issue. As a temporary workaround, consider restricting access to the Admin Smart Search feature until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Joplin version 2.8.8 **Description** The issue allows attackers to execute arbitrary commands via a crafted payload injected into the Node titles. **Recommendations** For Joplin version 2.8.8, consider restricting the injection of crafted payloads into Node titles until a patch is available. As a temporary workaround, avoid using potentially malicious Node titles to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** mailcow-dockerized versions prior to 2022-06a **Description** The issue concerns an extended privilege vulnerability in mailcow, a mailserver suite. This vulnerability can be exploited by manipulating custom parameters such as `regexmess`, `skipmess`, `regexflag`, `delete2foldersonly`, `delete2foldersbutnot`, `regextrans2`, `pipemess`, or `maxlinelengthcmd` to execute arbitrary code. **Recommendations** For versions prior to 2022-06a, update the mailcow instance with the `update.sh` script in the mailcow root directory to 2022-06a or newer to receive a patch for this issue. As a temporary workaround, consider removing the Syncjob ACL from all mailbox users to prevent changes to those settings.

**Name of the Vulnerable Software and Affected Versions** mailcow versions prior to 2022-05d **Description** The issue allows a remote authenticated user to inject OS commands and escalate privileges to domain admin via the --debug option in conjunction with the ---PIPEMESS option in Sync Jobs. **Recommendations** For versions prior to 2022-05d, update to a version 2022-05d or later to resolve the issue. As a temporary workaround, consider disabling the --debug option and the ---PIPEMESS option in Sync Jobs until a patch is available. Restrict access to Sync Jobs to minimize the risk of exploitation.