CVE-2024-3676
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2024
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
The Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains an Improper Input Validation vulnerability that allows an unauthenticated remote attacker with a specially crafted HTTP request to create additional Encryption user accounts under the attacker's control. These accounts are able to send spoofed email to any users within the domains configured by the Administrator.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Enterprise Protection
- Vendor
- Proofpoint
- Product
- Enterprise Protection
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 8.18.6 | affected | semver | patch 4868 | Unavailable |
|
| 8.20.0 | affected | semver | patch 4869 | Unavailable |
|
| 8.20.2 | affected | semver | patch 4870 | Unavailable |
|
| 8.20.4 | affected | semver | patch 4871 | Unavailable |
|
| 8.21.0 | affected | semver | patch 4871 | Unavailable |
|