First published: Wed Mar 08 2023(Updated: )
The webutils in Proofpoint Enterprise Protection (PPS/POD) contain a vulnerability that allows an authenticated user to execute remote code through 'eval injection'. This affects all versions 8.20.0 and below.
Credit: security@proofpoint.com
Affected Software | Affected Version | How to fix |
---|---|---|
Proofpoint Enterprise Protection | <8.13.22 | |
Proofpoint Enterprise Protection | >=8.18.0<8.18.4 | |
Proofpoint Enterprise Protection | =8.18.6 | |
Proofpoint Enterprise Protection | =8.20.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2023-0089 is a vulnerability in Proofpoint Enterprise Protection (PPS/POD) that allows an authenticated user to execute remote code through 'eval injection'.
The severity of CVE-2023-0089 is high, with a severity value of 8.8.
All versions 8.20.0 and below of Proofpoint Enterprise Protection are affected by CVE-2023-0089.
An authenticated user can exploit CVE-2023-0089 by using 'eval injection' to execute remote code.
Yes, there is a security advisory for CVE-2023-0089. You can find more information at the following link: [Proofpoint Security Advisory](https://www.proofpoint.com/security/security-advisories/pfpt-sa-2023-0001).