cisco-sa-sma-spam-jPxUXMk: Cisco Secure Email and Web Manager Spam Quarantine Unauthorized Access Vulnerability
First published: Wed Aug 18 2021(Updated: )
A vulnerability in the spam quarantine feature of Cisco Secure Email and Web Manager, formerly Cisco Security Management Appliance (SMA), could allow an authenticated, remote attacker to gain unauthorized access and modify the spam quarantine settings of another user. This vulnerability exists because access to the spam quarantine feature is not properly restricted. An attacker could exploit this vulnerability by sending malicious requests to an affected system. A successful exploit could allow the attacker to modify another user's spam quarantine settings, possibly disabling security controls or viewing email messages stored on the spam quarantine interfaces. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sma-spam-jPxUXMk Attention: Simplifying the Cisco portfolio includes the renaming of security products under one brand: Cisco Secure. For more information, see Meet Cisco Secure.
Credit: Louis Donalds Two Sigma InvestmentsMatt Selsky Two Sigma InvestmentsLP . Cisco would also like to thank Evgeni Sabev SAP SE for independently reporting this vulnerability
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Secure Email and Web Manager Firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-sma-spam-jPxUXMk?
The severity of cisco-sa-sma-spam-jPxUXMk is considered high due to the potential for unauthorized access to spam quarantine settings.
How do I fix cisco-sa-sma-spam-jPxUXMk?
To fix cisco-sa-sma-spam-jPxUXMk, apply the latest security patches provided by Cisco for the Cisco Secure Email and Web Manager.
Who is affected by cisco-sa-sma-spam-jPxUXMk?
Users of Cisco Secure Email and Web Manager are affected by the cisco-sa-sma-spam-jPxUXMk vulnerability.
What type of attack is associated with cisco-sa-sma-spam-jPxUXMk?
cisco-sa-sma-spam-jPxUXMk is associated with an authenticated remote attack that allows unauthorized modifications.
Can cisco-sa-sma-spam-jPxUXMk lead to data breaches?
Yes, cisco-sa-sma-spam-jPxUXMk could potentially lead to data breaches due to unauthorized access to sensitive spam quarantine settings.
- agent/type
- agent/event
- agent/last-modified-date
- agent/first-publish-date
- collector/cisco-advisory
- source/Cisco
- agent/weakness
- agent/title
- agent/author
- agent/severity
- agent/references
- agent/description
- agent/source
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco secure email and web manager firmware