An issue was discovered in Proofpoint Email Protection through 2019-09-08. By collecting scores from Proofpoint email headers, it is possible to build a copy-cat Machine Learning Classification model and extract insights from this model. The insights gathered allow an attacker to craft emails that receive preferable scores, with a goal of delivering malicious emails.
References
| Link | Resource |
|---|---|
| https://github.com/moohax/Proof-Pudding | Third Party Advisory |
| https://github.com/moohax/Talks/blob/master/slides/DerbyCon19.pdf | Third Party Advisory |
| https://www.proofpoint.com/us/security/CVE-2019-20634 | Vendor Advisory |
| https://www.proofpoint.com/us/security/security-advisories/pfpt-sn-2020-0001 | Vendor Advisory |
| https://atlas.mitre.org/studies/AML.CS0008 | |
| https://github.com/moohax/Proof-Pudding | Third Party Advisory |
| https://github.com/moohax/Talks/blob/master/slides/DerbyCon19.pdf | Third Party Advisory |
| https://www.proofpoint.com/us/security/CVE-2019-20634 | Vendor Advisory |
| https://www.proofpoint.com/us/security/security-advisories/pfpt-sn-2020-0001 | Vendor Advisory |
Configurations
History
21 Nov 2024, 04:38
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
|
| References | () https://github.com/moohax/Proof-Pudding - Third Party Advisory | |
| References | () https://github.com/moohax/Talks/blob/master/slides/DerbyCon19.pdf - Third Party Advisory | |
| References | () https://www.proofpoint.com/us/security/CVE-2019-20634 - Vendor Advisory | |
| References | () https://www.proofpoint.com/us/security/security-advisories/pfpt-sn-2020-0001 - Vendor Advisory |
Information
Published : 2020-03-30 21:15
Updated : 2024-11-21 04:38
NVD link : CVE-2019-20634
Mitre link : CVE-2019-20634
CVE.ORG link : CVE-2019-20634
JSON object : View
Products Affected
proofpoint
- email_protection
CWE
CWE-697
Incorrect Comparison