Vulnerability · Published Aug 17, 2020 · Assigned by cisco
CVE-2020-3447Cisco Email Security Appliance and Cisco Content Security Management Appliance Information Disclosure Vulnerability
Medium 5.5
In plain English
A medium-severity sensitive data in logs in Cisco Email Security Appliance (ESA) from Cisco. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 55% of all known vulnerabilities).
Official description
A vulnerability in the CLI of Cisco AsyncOS for Cisco Email Security Appliance (ESA) and Cisco AsyncOS for Cisco Content Security Management Appliance (SMA) could allow an authenticated, remote attacker to access sensitive information on an affected device. The vulnerability is due to excessive verbosity in certain log subscriptions. An attacker could exploit this vulnerability by accessing specific log files on an affected device. A successful exploit could allow the attacker to obtain sensitive log data, which may include user credentials. To exploit this vulnerability, the attacker would need to have valid credentials at the operator level or higher on the affected device.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Cisco Email Security Appliance (ESA) | n/a |
Weakness: CWE-532 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
References
- 20200805 Cisco Email Security Appliance and Cisco Content Security Management Appliance Information Disclosure Vulnerability vendor-advisory, x_refsource_CISCO