Description
The Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains a Server-Side Request Forgery vulnerability that allows an authenticated user to relay HTTP requests from the Protection server to otherwise private network addresses.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Proofpoint | Enterprise Protection | 8.18.6 – < patch 4868, 8.20.0 – < patch 4869, 8.20.2 – < patch 4870, 8.20.4 – < patch 4871, 8.21.0 – < patch 4871 | patch 4868 |