CVE-2011-1905
Last modified
CVE-2011-1905 is a vulnerability of currently unknown severity. Multiple cross-site request forgery (CSRF) vulnerabilities in unspecified administrative modules in Proofpoint Messaging Security Gateway 6.2.0.263:6.2.0.237 and earlier in Proofpoint Protection Server 5.5.3, 5.5.4, 5.5.5, 6.0.2, 6.1.1, and 6.2.0 allow remote attackers to hijack the authentication of administrators via unknown vectors.. EPSS estimates a 0.67% chance of exploitation in the next 30 days.
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in unspecified administrative modules in Proofpoint Messaging Security Gateway 6.2.0.263:6.2.0.237 and earlier in Proofpoint Protection Server 5.5.3, 5.5.4, 5.5.5, 6.0.2, 6.1.1, and 6.2.0 allow remote attackers to hijack the authentication of administrators via unknown vectors.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Proofpoint | Messaging Security Gateway | <= 6.2.0.263\:6.2.0.237 |
| Proofpoint | Protection Server | 5.5.3 |
| Proofpoint | Protection Server | 5.5.4 |
| Proofpoint | Protection Server | 5.5.5 |
| Proofpoint | Protection Server | 6.0.2 |
| Proofpoint | Protection Server | 6.1.1 |
| Proofpoint | Protection Server | 6.2.0 |
References
- http://www.kb.cert.org/vuls/id/790980US Government Resource
- http://www.kb.cert.org/vuls/id/790980US Government Resource
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2011-1905?
How severe is CVE-2011-1905?
How do I fix CVE-2011-1905?
Are you affected by CVE-2011-1905?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST