Server-Side Request Forgery (SSRF) in Proofpoint Enterprise Protection - CVE-2024-0862
Published: May 15, 2024
Vulnerability identifier: #VU89560
CSH Severity: Medium
CVSS v4: 5.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N]
CVE-ID: CVE-2024-0862
CWE-ID: CWE-918
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The disclosed vulnerability allows a remote user to perform SSRF attacks.
The vulnerability exists due to insufficient validation of user-supplied input within the Proofpoint Encryption endpoint. A remote user can send a specially crafted HTTP request and trick the application to initiate requests to arbitrary systems.
Successful exploitation of this vulnerability may allow a remote attacker gain access to sensitive data, located in the local network or send malicious requests to other servers from the vulnerable system.
Affected software
Proofpoint Enterprise Protection
How to mitigate CVE-2024-0862
Install updates from vendor's website.
Proofpoint Enterprise Protection - addressed in versions 8.18.6 patch 4868, 8.20.0 patch 4869, 8.20.2 patch 4870, 8.20.4 patch 4871, 8.21.0 patch 4872