CVE-2015-4322
published 2015-08-19CVE-2015-4322: Cisco Content Security Management Appliance (SMA) 8.3.6-039, 9.1.0-31, and 9.1.0-103 improperly restricts the privileges available after LDAP authentication…
PriorityP432medium5.5CVSS 2.0
AVNACLAuSCPIPAN
EPSS
1.70%
74.6th percentile
Cisco Content Security Management Appliance (SMA) 8.3.6-039, 9.1.0-31, and 9.1.0-103 improperly restricts the privileges available after LDAP authentication, which allows remote authenticated users to read or write to an arbitrary user's Spam Quarantine folder by visiting a spam-notification URL, aka Bug ID CSCuv65894.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | content_security_management_appliance | — | — |
| cisco | content_security_management_appliance | — | — |
| cisco | content_security_management_appliance | — | — |
CVSS provenance
nvdv2.05.5MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:N
vendor_cisco5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco Security Mail Appliance Email Spam Quarantine Privilege Escalation Vulnerability
vendor_cisco·2015-08-14·CVSS 5.5
CVE-2015-4322 [MEDIUM] CWE-264 Cisco Security Mail Appliance Email Spam Quarantine Privilege Escalation Vulnerability
Cisco Security Mail Appliance Email Spam Quarantine Privilege Escalation Vulnerability
A vulnerability in the email Spam Quarantine, Lightweight Directory Access Protocol (LDAP) authentication of the Cisco Content Security Management Appliance (SMA) could allow an authenticated, remote attacker to escalate privileges to those of the Spam Quarantine.
The vulnerability is due to improper authentication privileges that are granted when a user performs LDAP authentication. An attacker could exploit this vulnerability by clicking on the URL that is sent in the spam notification email for a specific message in the Spam Quarantine. An exploit could allow the attacker read and write access to another user's Spam Quarantine, which allows for manipulation of quarantine email messages and configura
GHSA
GHSA-833f-986w-x96h: Cisco Content Security Management Appliance (SMA) 8
ghsa_unreviewed·2022-05-17
CVE-2015-4322 [MEDIUM] GHSA-833f-986w-x96h: Cisco Content Security Management Appliance (SMA) 8
Cisco Content Security Management Appliance (SMA) 8.3.6-039, 9.1.0-31, and 9.1.0-103 improperly restricts the privileges available after LDAP authentication, which allows remote authenticated users to read or write to an arbitrary user's Spam Quarantine folder by visiting a spam-notification URL, aka Bug ID CSCuv65894.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2015-08-19
Published