Description (CNA)
The Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains a Server-Side Request Forgery vulnerability that allows an authenticated user to relay HTTP requests from the Protection server to otherwise private network addresses.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Proofpoint / Enterprise Protection | affected 8.18.6 before patch 4868; affected 8.20.0 before patch 4869; affected 8.20.2 before patch 4870; affected 8.20.4 before patch 4871; affected 8.21.0 before patch 4871 |
CWE
CWE-918
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.