CVE-2023-2820

CVE-2023-2820 is an information disclosure vulnerability affecting Proofpoint Threat Response / Threat Response Auto-Pull (PTR/TRAP) versions prior to 5.10.0. An attacker on an adjacent network can exploit this vulnerability via a man-in-the-middle position or cryptanalysis of session traffic to obtain credentials for integrated services. This allows the attacker to impersonate PTR/TRAP to these services, leading to high confidentiality and integrity impacts. The CVSS score is 6.8 (Medium), indicating an adjacent attack vector and high attack complexity. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.