cisco-sa-esa-mailpol-bypass-5nVcJZMw: Cisco Secure Email Gateway Email Filter Bypass Vulnerability
A vulnerability in the email filtering mechanism of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to bypass the configured rules and allow emails that should have been denied to flow through an affected device. This vulnerability is due to improper handling of email that passes through an affected device. An attacker could exploit this vulnerability by sending a crafted email through the affected device. A successful exploit could allow the attacker to bypass email filters on the affected device.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-mailpol-bypass-5nVcJZMw
Affected Software
Event History
Frequently Asked Questions
What is the severity of cisco-sa-esa-mailpol-bypass-5nVcJZMw?
The severity of cisco-sa-esa-mailpol-bypass-5nVcJZMw is classified as high due to the potential for unauthorized email access.
What can an attacker do with cisco-sa-esa-mailpol-bypass-5nVcJZMw?
An attacker can bypass email filtering rules, allowing unauthorized emails to pass through the Cisco Secure Email Gateway.
How do I fix cisco-sa-esa-mailpol-bypass-5nVcJZMw?
To fix cisco-sa-esa-mailpol-bypass-5nVcJZMw, ensure that you apply the latest patch provided by Cisco for your version of Secure Email Gateway.
Who is affected by cisco-sa-esa-mailpol-bypass-5nVcJZMw?
Organizations using Cisco Secure Email Gateway with improperly configured rules are affected by cisco-sa-esa-mailpol-bypass-5nVcJZMw.
What versions of Cisco Secure Email Gateway are impacted by cisco-sa-esa-mailpol-bypass-5nVcJZMw?
The vulnerability affects multiple versions of Cisco Secure Email Gateway running Cisco AsyncOS.