Vulnerability · Published Mar 4, 2025 · Assigned by cisco
CVE-2020-3122Cisco Content Security Management Appliance Information Disclosure Vulnerability
Medium 5.3
In plain English
A medium-severity improper access control in Cisco IronPort Security Management Appliance from Cisco. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 33% of all known vulnerabilities).
Severity (CVSS 3.0)5.3Medium
Exploit odds (30 days)0.4%top 66.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Content Security Management Appliance (SMA) could allow an unauthenticated, remote attacker to obtain sensitive network information.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Cisco IronPort Security Management Appliance | N/A |
| Cisco | Cisco Secure Email and Web Manager | 11.0.0(Ritz)-128 |
Weakness: CWE-284 · Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N