What is the severity of cisco-sa-esa-sma-log-YxQ6g2kG?

The severity of cisco-sa-esa-sma-log-YxQ6g2kG is classified as high due to the potential for sensitive information disclosure.

How do I fix cisco-sa-esa-sma-log-YxQ6g2kG?

To fix cisco-sa-esa-sma-log-YxQ6g2kG, upgrade to the latest available firmware version for Cisco Email Security Appliance or Cisco Content Security Management Appliance.

Who is affected by cisco-sa-esa-sma-log-YxQ6g2kG?

Cisco Email Security Appliance and Cisco Content Security Management Appliance users are affected by cisco-sa-esa-sma-log-YxQ6g2kG.

What type of attack does cisco-sa-esa-sma-log-YxQ6g2kG enable?

cisco-sa-esa-sma-log-YxQ6g2kG enables authenticated remote attackers to access sensitive information on affected devices.

When was cisco-sa-esa-sma-log-YxQ6g2kG disclosed?

cisco-sa-esa-sma-log-YxQ6g2kG was disclosed in a security advisory by Cisco.

Vulnerability/
cisco-sa-esa-sma-log-YxQ6g2kG

medium

5.5

CWE

532

5/8/2020

cisco-sa-esa-sma-log-YxQ6g2kG: Cisco Email Security Appliance and Cisco Content Security Management Appliance Information Disclosure Vulnerability

First published: Wed Aug 05 2020(Updated: )

A vulnerability in the CLI of Cisco AsyncOS for Cisco Email Security Appliance (ESA) and Cisco AsyncOS for Cisco Content Security Management Appliance (SMA) could allow an authenticated, remote attacker to access sensitive information on an affected device. The vulnerability is due to excessive verbosity in certain log subscriptions. An attacker could exploit this vulnerability by accessing specific log files on an affected device. A successful exploit could allow the attacker to obtain sensitive log data, which may include user credentials. To exploit this vulnerability, the attacker would need to have valid credentials at the operator level or higher on the affected device. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-sma-log-YxQ6g2kG

Credit: This vulnerability was found during the resolution a Cisco TAC support case

Affected Software	Affected Version	How to fix
Cisco Email Security Appliance Firmware
Cisco Content Security Management Virtual Appliance

Never miss a vulnerability like this again

Reference Links

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-sma-log-YxQ6g2kG (Advisory)

Child vulnerabilities

(Contains the following vulnerabilities)

CVE-2020-3447

Frequently Asked Questions

What is the severity of cisco-sa-esa-sma-log-YxQ6g2kG?
The severity of cisco-sa-esa-sma-log-YxQ6g2kG is classified as high due to the potential for sensitive information disclosure.
How do I fix cisco-sa-esa-sma-log-YxQ6g2kG?
To fix cisco-sa-esa-sma-log-YxQ6g2kG, upgrade to the latest available firmware version for Cisco Email Security Appliance or Cisco Content Security Management Appliance.
Who is affected by cisco-sa-esa-sma-log-YxQ6g2kG?
Cisco Email Security Appliance and Cisco Content Security Management Appliance users are affected by cisco-sa-esa-sma-log-YxQ6g2kG.
What type of attack does cisco-sa-esa-sma-log-YxQ6g2kG enable?
cisco-sa-esa-sma-log-YxQ6g2kG enables authenticated remote attackers to access sensitive information on affected devices.
When was cisco-sa-esa-sma-log-YxQ6g2kG disclosed?
cisco-sa-esa-sma-log-YxQ6g2kG was disclosed in a security advisory by Cisco.

agent/event
agent/type
agent/last-modified-date
agent/first-publish-date
collector/cisco-advisory
source/Cisco
agent/severity
agent/author
agent/references
agent/weakness
agent/title
agent/description
agent/source
agent/softwarecombine
agent/tags
agent/guess-ai
agent/software-canonical-lookup
agent/software-canonical-lookup-request
vendor/cisco
canonical/cisco email security appliance firmware
canonical/cisco content security management virtual appliance