Security restrictions bypass in Cisco Content Security Management Appliance - CVE-2018-0140

Vulnerability identifier: #VU10421

CSH Severity: Low

CVSS v4: 5.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-0140

CWE-ID: CWE-264

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote authenticated attacker to bypass security restrictions on the target system.

The weakness exists in the spam quarantine due to a lack of verification of authenticated user accounts. A remote attacker can modify browser strings to see and download messages submitted by other users to the spam quarantine within their company.

Cisco Content Security Management Appliance
Cisco Email Security Appliance

Install update from vendor's website.

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180207-esacsm

• Security restrictions bypass in Cisco Content Security Management Appliance
• Security restrictions bypass in Cisco Email Security Appliance