PT-2021-9685 · Proofpoint · Proofpoint Enterprise Protection

Published 2021-05-07 · Updated 2021-05-19 · CVE-2020-14009

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Proofpoint Enterprise Protection (PPS/PoD) versions prior to 8.16.4

Description The issue allows an attacker to deliver an email message with a malicious attachment that bypasses scanning and file-blocking rules. This is due to the improper handling of messages with certain crafted and malformed multipart structures.

Recommendations For versions prior to 8.16.4, update to version 8.16.4 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-354

Related Identifiers

CVE-2020-14009

Affected Products

Proofpoint Enterprise Protection

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2020-14009 · Security Note
• https://proofpoint.com/us/security/security-advisories/pfpt-sa-2021-0006 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-14009 · Vendor Advisory
• https://proofpoint.com/us/security/security-advisories · Vendor Advisory
• https://t.me/cvenotify/14248 · Telegram Post