CVE-2018-0140
published 2018-02-08CVE-2018-0140: A vulnerability in the spam quarantine of Cisco Email Security Appliance and Cisco Content Security Management Appliance could allow an authenticated, remote…
PriorityP337medium6.5CVSS 3.1
AVNACLPRLUINSUCHINAN
EPSS
1.56%
72.6th percentile
A vulnerability in the spam quarantine of Cisco Email Security Appliance and Cisco Content Security Management Appliance could allow an authenticated, remote attacker to download any message from the spam quarantine by modifying browser string information. The vulnerability is due to a lack of verification of authenticated user accounts. An attacker could exploit this vulnerability by modifying browser strings to see messages submitted by other users to the spam quarantine within their company. Cisco Bug IDs: CSCvg39759, CSCvg42295.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | content_security_management_appliance | — | — |
| cisco | content_security_management_appliance | — | — |
| cisco | content_security_management_appliance | — | — |
| cisco | content_security_management_appliance | — | — |
| cisco | email_security_appliance_and_cisco_content_security_management_appliance_spam_qu | — | — |
| cisco | email_security_appliance_firmware | — | — |
| cisco | email_security_appliance_firmware | — | — |
| cisco | email_security_appliance_firmware | — | — |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
nvdv2.04.0MEDIUMAV:N/AC:L/Au:S/C:P/I:N/A:N
vendor_cisco6.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-w5x3-hp8j-7gh2: A vulnerability in the spam quarantine of Cisco Email Security Appliance and Cisco Content Security Management Appliance could allow an authenticated,
ghsa_unreviewed·2022-05-13
CVE-2018-0140 [MEDIUM] CWE-425 GHSA-w5x3-hp8j-7gh2: A vulnerability in the spam quarantine of Cisco Email Security Appliance and Cisco Content Security Management Appliance could allow an authenticated,
A vulnerability in the spam quarantine of Cisco Email Security Appliance and Cisco Content Security Management Appliance could allow an authenticated, remote attacker to download any message from the spam quarantine by modifying browser string information. The vulnerability is due to a lack of verification of authenticated user accounts. An attacker could exploit this vulnerability by modifying browser strings to see messages submitted by other users to the spam quarantine within their company. Cisco Bug IDs: CSCvg39759, CSCvg42295.
Cisco
Cisco Email Security Appliance and Cisco Content Security Management Appliance Spam Quarantine Vulnerability
vendor_cisco·2018-02-08·CVSS 6.5
CVE-2018-0140 [MEDIUM] CWE-200 Cisco Email Security Appliance and Cisco Content Security Management Appliance Spam Quarantine Vulnerability
Cisco Email Security Appliance and Cisco Content Security Management Appliance Spam Quarantine Vulnerability
A vulnerability in the spam quarantine of Cisco Email Security Appliance and Cisco Content Security Management Appliance could allow an authenticated, remote attacker to download any message from the spam quarantine by modifying browser string information.
The vulnerability is due to a lack of verification of authenticated user accounts. An attacker could exploit this vulnerability by modifying browser strings to see messages submitted by other users to the spam quarantine within their company.
There are no workarounds that address this vulnerability.
This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/c
Cisco
Cisco Email Security Appliance and Cisco Content Security Management Appliance Spam Quarantine Vulnerability
vendor_cisco·CVSS 3.0
CVE-2018-0140 Cisco Email Security Appliance and Cisco Content Security Management Appliance Spam Quarantine Vulnerability
CVE-2018-0140: Cisco Email Security Appliance and Cisco Content Security Management Appliance Spam Quarantine Vulnerability
A vulnerability in the spam quarantine of Cisco Email Security Appliance and Cisco Content Security Management Appliance could allow an authenticated, remote attacker to download any message from the spam quarantine by modifying browser string information. The vulnerability is due to a lack of verification of authenticated user accounts. An attacker could exploit this vulnerability by modifying browser strings to see messages submitted by other users to the spam quarantine within their company. There are no
CVSS: 3.0
CWE: CWE-200, CWE-200
Bug IDs: CSCvg39759, CSCvg42295
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://www.securityfocus.com/bid/103090http://www.securitytracker.com/id/1040338http://www.securitytracker.com/id/1040339https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180207-esacsmhttp://www.securityfocus.com/bid/103090http://www.securitytracker.com/id/1040338http://www.securitytracker.com/id/1040339https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180207-esacsm
2018-02-08
Published