Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2024-3676

The Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains an Improper Input Validation vulnerability that allows an unauthenticated remote attacker with a spe

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Proofpoint

Description

The Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains an Improper Input Validation vulnerability that allows an unauthenticated remote attacker with a specially crafted HTTP request to create additional Encryption user accounts under the attacker's control.  These accounts are able to send spoofed email to any users within the domains configured by the Administrator.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Proofpoint Enterprise Protection

Default version status: affected

  • 8.18.6 to < patch 4868affected
  • 8.20.0 to < patch 4869affected
  • 8.20.2 to < patch 4870affected
  • 8.20.4 to < patch 4871affected
  • 8.21.0 to < patch 4871affected

References