Lucene search

K
cvelistProofpointCVELIST:CVE-2022-46333
HistoryDec 06, 2022 - 7:52 p.m.

CVE-2022-46333 Proofpoint Enterprise Protection perl eval() arbitrary command execution

2022-12-0619:52:36
CWE-94
Proofpoint
www.cve.org
proofpoint enterprise protection
command injection
cve-2022-46333
admin user interface
arbitrary command execution
version 8.19.0

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.3%

The admin user interface in Proofpoint Enterprise Protection (PPS/PoD) contains a command injection vulnerability that enables an admin to execute commands beyond their allowed scope. This affects all versions 8.19.0 and below.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "enterprise_protection",
    "vendor": "proofpoint",
    "versions": [
      {
        "changes": [
          {
            "at": "8.19.0 patch 4546",
            "status": "unaffected"
          },
          {
            "at": "8.18.6 patch 4545",
            "status": "unaffected"
          },
          {
            "at": "8.18.4 patch 4544",
            "status": "unaffected"
          },
          {
            "at": "8.13.22 patch 4543",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "8.19.0",
        "status": "affected",
        "version": "8.*",
        "versionType": "semver"
      }
    ]
  }
]

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.3%

Related for CVELIST:CVE-2022-46333