CVE-2011-1905 Multiple cross-site request forgery (CSRF) vulnerabilities in unspecified administrative modules in Proofpoint Messaging Security Gateway 6.2.0.263:6.2.0.237 and earlier in Proofpoint Protection Serve...
MediumCVSS 6.8
EPSS 0.67%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in unspecified administrative modules in Proofpoint Messaging Security Gateway 6.2.0.263:6.2.0.237 and earlier in Proofpoint Protection Server 5.5.3, 5.5.4, 5.5.5, 6.0.2, 6.1.1, and 6.2.0 allow remote attackers to hijack the authentication of administrators via unknown vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| proofpoint messaging security gateway | <= 6.2.0.263\:6.2.0.237 | No fix listed |
| proofpoint protection server | = 5.5.3 | No fix listed |
| proofpoint protection server | = 5.5.4 | No fix listed |
| proofpoint protection server | = 5.5.5 | No fix listed |
| proofpoint protection server | = 6.0.2 | No fix listed |
| proofpoint protection server | = 6.1.1 | No fix listed |
| proofpoint protection server | = 6.2.0 | No fix listed |
References
- www.clearskies.net
- VU#790980 third-party-advisory us-government-resource
- support.proofpoint.com