Improper Authentication in Cisco Secure Email and Web Manager

1) Improper Authentication

EUVDB-ID: #VU56026

Risk: Medium

CVSSv3.1: 4.7 [CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-1561

CWE-ID: CWE-287 - Improper Authentication

Exploit availability: No

Description

The vulnerability allows a remote attacker to bypass authentication process.

The vulnerability exists due to access to the spam quarantine feature is not properly restricted. A remote authenticated attacker can send a specially crafted request to gain unauthorized access and modify the spam quarantine settings of another user.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

Cisco Secure Email and Web Manager: before 14.1

External links

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sma-spam-jPxUXMk

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.