CVE-2023-5770

Proofpoint Enterprise Protection contains a vulnerability in the email delivery agent that allows an unauthenticated attacker to inject improperly encoded HTML into the email body of a message through the email subject. The vulnerability is caused by inappropriate encoding when rewriting the email before delivery.This issue affects Proofpoint Enterprise Protection: from 8.20.2 before patch 4809, from 8.20.0 before patch 4805, from 8.18.6 before patch 4804 and all other prior versions.

CVSS v3 5.4 MEDIUM

5.4^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 2.5

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2023-0009	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:proofpoint:enterprise_protection:8.18.6:::::::*
	cpe:2.3:a:proofpoint:enterprise_protection:8.20.0:::::::*
	cpe:2.3:a:proofpoint:enterprise_protection:8.20.2:::::::*

History

No history.

Information

Published : 2024-01-09 22:15

Updated : 2024-01-18 15:54

NVD link : CVE-2023-5770

Mitre link : CVE-2023-5770

CVE.ORG link : CVE-2023-5770

JSON object : View

Products Affected

proofpoint

enterprise_protection

CWE

CWE-838

Inappropriate Encoding for Output Context

{"id": "CVE-2023-5770", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 2.5, "exploitabilityScore": 2.8}, {"type": "Secondary", "source": "security@proofpoint.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "published": "2024-01-09T22:15:43.400", "references": [{"url": "https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2023-0009", "tags": ["Vendor Advisory"], "source": "security@proofpoint.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-838"}]}, {"type": "Secondary", "source": "security@proofpoint.com", "description": [{"lang": "en", "value": "CWE-838"}]}], "descriptions": [{"lang": "en", "value": "Proofpoint Enterprise Protection contains a vulnerability in the email delivery agent that allows an unauthenticated attacker to inject improperly encoded HTML into the email body of a message through the email subject. The vulnerability is caused by inappropriate encoding when rewriting the email before delivery.This issue affects Proofpoint Enterprise Protection: from 8.20.2 before patch 4809, from 8.20.0 before patch 4805, from 8.18.6 before patch 4804 and all other prior versions.\n\n"}, {"lang": "es", "value": "Proofpoint Enterprise Protection contiene una vulnerabilidad en el agente de entrega de correo electr\u00f3nico que permite a un atacante no autenticado inyectar HTML codificado incorrectamente en el cuerpo de un mensaje de correo electr\u00f3nico a trav\u00e9s del asunto del correo electr\u00f3nico. La vulnerabilidad se debe a una codificaci\u00f3n inadecuada al reescribir el correo electr\u00f3nico antes de la entrega. Este problema afecta a Proofpoint Enterprise Protection: desde 8.20.2 antes del parche 4809, desde 8.20.0 antes del parche 4805, desde 8.18.6 antes del parche 4804 y todas las dem\u00e1s versiones anteriores."}], "lastModified": "2024-01-18T15:54:37.647", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:proofpoint:enterprise_protection:8.18.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7E481ED5-1AC8-4FEA-9169-17CDE7AB93DA"}, {"criteria": "cpe:2.3:a:proofpoint:enterprise_protection:8.20.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "83C899EC-C3E7-4D34-8362-DEB40F16AD09"}, {"criteria": "cpe:2.3:a:proofpoint:enterprise_protection:8.20.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C22954AF-4D4E-4C9D-868A-62091BD57CC7"}], "operator": "OR"}]}], "sourceIdentifier": "security@proofpoint.com"}