SB2023061533 - Multiple vulnerabilities in Proofpoint Threat Response / Threat Response Auto-Pull

Description

This security bulletin contains information about 2 secuirty vulnerabilities.

1) Inadequate Encryption Strength (CVE-ID: CVE-2023-2820)

The vulnerability allows a remote attacker to perform MitM attack.

The vulnerability exists due to usage of weak encryption in the faye endpoint. A remote attacker with ability to intercept traffic can decrypt it and obtain credentials to integrated services.

2) Stored cross-site scripting (CVE-ID: CVE-2023-2819)

The disclosed vulnerability allows a remote user to perform cross-site scripting (XSS) attacks.

The vulnerability exists due to insufficient sanitization of user-supplied data in the Sources UI. A remote user can inject and execute arbitrary HTML and script code in user's browser in context of vulnerable website.

Remediation

Install update from vendor's website.

References

• https://www.proofpoint.com/security/security-advisories/pfpt-sa-2023-0003
• https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2023-0002