The Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains an...
Vulnerability Description
The Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains an Improper Input Validation vulnerability that allows an unauthenticated remote attacker with a specially crafted HTTP request to create additional Encryption user accounts under the attacker's control. These accounts are able to send spoofed email to any users within the domains configured by the Administrator.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-3676
Credits & Attribution
No credits recorded in the NVD database.
More from Proofpoint
View All →Affected Vendor
Proofpoint
View all reports →