Vulnerability · Published Aug 18, 2021 · Assigned by cisco

CVE-2021-1561Cisco Secure Email and Web Manager Spam Quarantine Unauthorized Access Vulnerability

Medium 5.4

In plain English

A medium-severity security flaw in Cisco Content Security Management Appliance (SMA) from Cisco. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 55% of all known vulnerabilities).

Severity (CVSS 3.1)5.4Medium

Exploit odds (30 days)0.7%top 45.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A vulnerability in the spam quarantine feature of Cisco Secure Email and Web Manager, formerly Cisco Security Management Appliance (SMA), could allow an authenticated, remote attacker to gain unauthorized access and modify the spam quarantine settings of another user. This vulnerability exists because access to the spam quarantine feature is not properly restricted. An attacker could exploit this vulnerability by sending malicious requests to an affected system. A successful exploit could allow the attacker to modify another user's spam quarantine settings, possibly disabling security controls or viewing email messages stored on the spam quarantine interfaces.

Affected products (as reported)

Vendor	Product	Versions
Cisco	Cisco Content Security Management Appliance (SMA)	n/a

Weakness: CWE-302 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

References

20210818 Cisco Secure Email and Web Manager Spam Quarantine Unauthorized Access Vulnerability vendor-advisory, x_refsource_CISCO