Information Disclosure Vulnerability in Proofpoint Threat Response Services

CVE-2023-2820

Summary

A vulnerability present in Proofpoint Threat Response / Threat Response Auto-Pull (PTR/TRAP) allows attackers on adjacent networks to exploit weaknesses in the faye endpoint. This could enable them to capture session traffic or perform cryptanalysis, potentially exposing credentials to integrated services. With these credentials, an attacker could impersonate PTR/TRAP and gain unauthorized access to sensitive services. Affected versions include all prior to 5.10.0.

References