CVE-2021-1561— Cisco Secure Email and Web Manager Spam Quarantine Unauthorized Access Vulnerability

Cisco Secure Email and Web Manager Spam Quarantine Unauthorized Access Vulnerability

A vulnerability in the spam quarantine feature of Cisco Secure Email and Web Manager, formerly Cisco Security Management Appliance (SMA), could allow an authenticated, remote attacker to gain unauthorized access and modify the spam quarantine settings of another user. This vulnerability exists because access to the spam quarantine feature is not properly restricted. An attacker could exploit this vulnerability by sending malicious requests to an affected system. A successful exploit could allow the attacker to modify another user's spam quarantine settings, possibly disabling security controls or viewing email messages stored on the spam quarantine interfaces.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

使用假设不可变数据进行的认证绕过

Cisco Secure Email 授权问题漏洞

Cisco Secure Email是美国思科（Cisco）公司的思科安全电子邮件（前身为电子邮件安全）为您的电子邮件提供最佳保护，使其免受网络威胁。 Cisco Secure Email 和 Web Manager存在授权问题漏洞，攻击者可利用该漏洞可以通过向受影响的系统发送恶意请求来达到攻击的目的。

N/A

N/A