« Volver al listado

CVE-2011-1901

Estado: ModificadaAlta (7.5)—

The mail-filter web interface in Proofpoint Messaging Security Gateway 6.2.0.263:6.2.0.237 and earlier in Proofpoint Protection Server 5.5.3, 5.5.4, 5.5.5, 6.0.2, 6.1.1, and 6.2.0 allows remote attackers to bypass authentication via unspecified vectors.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Proofpoint — Messaging Security GatewayProofpoint — Protection Server

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2011-1901",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2011-05-05T14:55:03.183",
  "references": [
    {
      "url": "http://www.clearskies.net/documents/css-advisory-css1105-proofpoint.php",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/790980",
      "tags": [
        "US Government Resource"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://support.proofpoint.com/article.cgi?article_id=338413",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.clearskies.net/documents/css-advisory-css1105-proofpoint.php",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/790980",
      "tags": [
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://support.proofpoint.com/article.cgi?article_id=338413",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-287"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The mail-filter web interface in Proofpoint Messaging Security Gateway 6.2.0.263:6.2.0.237 and earlier in Proofpoint Protection Server 5.5.3, 5.5.4, 5.5.5, 6.0.2, 6.1.1, and 6.2.0 allows remote attackers to bypass authentication via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "La interfaz web del correo web de Proofpoint Messaging Security Gateway v6.2.0.263:6.2.0.237 y anteriores en Proofpoint Protection Server v5.5.3, v5.5.4, v5.5.5, v6.0.2, v6.1.1 y v6.2.0 permite a atacantes remotos eludir la autenticación a través de vectores no especificados."
    }
  ],
  "lastModified": "2026-06-16T23:30:20.330",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:proofpoint:messaging_security_gateway:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3E42E896-CEBA-4C28-B8D7-7844CF749673",
              "versionEndIncluding": "6.2.0.263\\:6.2.0.237"
            },
            {
              "criteria": "cpe:2.3:a:proofpoint:protection_server:5.5.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9467D393-B158-40CC-B1E1-3D054B0AEC66"
            },
            {
              "criteria": "cpe:2.3:a:proofpoint:protection_server:5.5.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "15B44F43-7680-4997-9AC4-0EF177179B95"
            },
            {
              "criteria": "cpe:2.3:a:proofpoint:protection_server:5.5.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5D8B6E13-9CBB-4193-8C94-5C5AC07CC801"
            },
            {
              "criteria": "cpe:2.3:a:proofpoint:protection_server:6.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6BEB196A-5653-4A49-8805-329E34E95372"
            },
            {
              "criteria": "cpe:2.3:a:proofpoint:protection_server:6.1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "99E0E268-A942-4BB4-9555-735C05D90F1F"
            },
            {
              "criteria": "cpe:2.3:a:proofpoint:protection_server:6.2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "32D2B690-C33C-4F13-80BD-CA9260C941DF"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}