Skip to content
CVE PROGRAM SOURCE RECORD5.0 Medium

CVE-2024-0862

The Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains a Server-Side Request Forgery vulnerability that allows an authenticated user to relay HTTP requests

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Proofpoint

Description

The Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains a Server-Side Request Forgery vulnerability that allows an authenticated user to relay HTTP requests from the Protection server to otherwise private network addresses.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Proofpoint Enterprise Protection

Default version status: affected

  • 8.18.6 to < patch 4868affected
  • 8.20.0 to < patch 4869affected
  • 8.20.2 to < patch 4870affected
  • 8.20.4 to < patch 4871affected
  • 8.21.0 to < patch 4871affected

References