cisco-sa-20190703-esa-filterpass: Cisco Email Security Appliance Content Filter Bypass Vulnerability
A vulnerability in the email message scanning of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass configured filters on the device. The vulnerability is due to improper input validation of certain email fields. An attacker could exploit this vulnerability by sending a crafted email message to a recipient protected by the ESA. A successful exploit could allow the attacker to bypass configured message filters and inject arbitrary scripting code inside the email body. The malicious code is not executed by default unless the recipient's email client is configured to execute scripts contained in emails. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190703-esa-filterpass
Credit
Affected Software
Event History
Frequently Asked Questions
What is the severity of cisco-sa-20190703-esa-filterpass?
The cisco-sa-20190703-esa-filterpass vulnerability is considered high severity due to its potential to allow unauthorized access to email filtering mechanisms.
How do I fix cisco-sa-20190703-esa-filterpass?
To fix cisco-sa-20190703-esa-filterpass, update your Cisco Email Security Appliance to the latest version of AsyncOS Software.
Who is affected by cisco-sa-20190703-esa-filterpass?
Cisco Email Security Appliance users running vulnerable versions of AsyncOS Software are affected by cisco-sa-20190703-esa-filterpass.
What type of vulnerability is cisco-sa-20190703-esa-filterpass?
cisco-sa-20190703-esa-filterpass is a security vulnerability that relates to improper input validation allowing filter bypass.
Can cisco-sa-20190703-esa-filterpass be exploited remotely?
Yes, cisco-sa-20190703-esa-filterpass can be exploited by unauthenticated remote attackers.