LowVulnerability
CVE-2019-20634: Proofpoint Email Protection model extraction via collected email header scores
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2019-20634
- Published
- Record updated
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 1.6%
Summary
CVE-2019-20634 affects Proofpoint Email Protection through 2019-09-08. By collecting scores from Proofpoint email headers, an attacker can build a copy-cat Machine Learning Classification model and extract insights from it. Those insights let the attacker craft emails that receive preferable scores in order to deliver malicious emails.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Related items
- InfoAnchored Rank-Adversarial Fine-Tuning Pretrained Visual Place Recognition ModelsSimilar attack · Arxiv (cs.RO + cs.CV security)
- InfoSay the Same, Act Differently: Diagnosing and Steering Text-Action Divergence in Reasoning VLAsSimilar attack · Arxiv (cs.RO + cs.CV security)
- InfoDetect, Repair and Audit: A Hierarchical Multi-Agent Defense Against Adversarial Attacks in Energy ForecastingSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
- InfoSANAI: Secure ECC Distributed Keyed Parity Embedded in Weights for Protecting Neural Networks against Bit-Flip AttacksSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
- InfoTowards Fine-grained and Robust Detection of Human-AI Co-authorshipSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)