Description

The Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains an Improper Input Validation vulnerability that allows an unauthenticated remote attacker with a specially crafted HTTP request to create additional Encryption user accounts under the attacker's control.  These accounts are able to send spoofed email to any users within the domains configured by the Administrator.

INFO

Published Date :

2024-05-14T19:07:19.420Z

Last Modified :

2024-08-01T20:19:59.948Z

Source :

Proofpoint
AFFECTED PRODUCTS

The following products are affected by CVE-2024-3676 vulnerability.

Vendors Products
Proofpoint
  • Enterprise Protection
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-3676.

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact