Proofpoint Enterprise Protection Endpoint Vulnerable to Improper Input Validation Attacks

CVE-2024-3676

Summary

The Proofpoint Encryption component of Proofpoint Enterprise Protection is vulnerable due to improper input validation. This flaw enables unauthenticated remote attackers to exploit the system via specially crafted HTTP requests, potentially allowing the creation of additional encryption user accounts that are under their control. These malicious accounts can send spoofed emails to users within any configured domains, posing significant risks to organizations and compromising the integrity of email communications.

References