PT-2024-15873 · Proofpoint · Proofpoint Enterprise Protection+2

Published 2024-01-27 · Updated 2024-05-14 · CVE-2024-0862

Positive Technologies (AI Summary)

CVSS v3.1

5.0

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Proofpoint Enterprise Protection (affected versions not specified)

Description The issue concerns a Server-Side Request Forgery vulnerability in the Proofpoint Encryption endpoint. This allows an authenticated user to relay HTTP requests from the Protection server to private network addresses. There are reports of real-world incidents where this issue was exploited, with claims of hacking into the Proofpoint email security product using two vulnerabilities.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2024-0862

Affected Products

Proofpoint Encryption

Proofpoint Enterprise Protection

Proofpoint Email Security

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2024-0862 · Security Note
• https://proofpoint.com/us/security/security-advisories/pfpt-sa-2024-0001 · Note
• https://twitter.com/malcolmx0x/status/1751305058132619354 · Twitter Post