CVE-2022-20868

CWE-321CWE-798 — Hard-coded CredentialsCWE-89 — SQL Injection4 documents4 sources
Severity
8.8HIGH
EPSS
0.3%
top 47.56%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Cisco AsyncosCisco Cisco Secure EmailCisco Cisco Secure Email AND WEB Manager+1 more
Timeline
PublishedNov 4

Description

A vulnerability in the web-based management interface of Cisco Email Security Appliance, Cisco Secure Email and Web Manager and Cisco Secure Web Appliance could allow an authenticated, remote attacker to elevate privileges on an affected system. The attacker needs valid credentials to exploit this vulnerability. This vulnerability is due to the use of a hardcoded value to encrypt a token used for certain APIs calls . An attacker could exploit this vulnerability by authenticating to the device a…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:LExploitability: 1.2 | Impact: 3.4

Affected Packages4 packages

▶CVEListV5cisco/cisco_secure_email4 versions+3
▶CVEListV5cisco/cisco_secure_web_appliance11 versions+10
▶NVDcisco/asyncos13.0 — 14.2.1+4

🔴Vulnerability Details

2
GHSA
GHSA-24wm-cqx7-gv2j: A vulnerability in the web-based management interface of Cisco Email Security Appliance, Cisco Secure Email and Web Manager and Cisco Secure Web Appli↗2022-11-04
▶
CVEList
CVE-2022-20868: A vulnerability in the web-based management interface of Cisco Email Security Appliance, Cisco Secure Email and Web Manager and Cisco Secure Web Appli↗2022-11-03
▶

📋Vendor Advisories

1
Cisco
Cisco Email Security Appliance, Cisco Secure Email and Web Manager, and Cisco Secure Web Appliance Next Generation Management Vulnerabilities↗2022-11-02
▶
CVE-2022-20868 (HIGH CVSS 8.8) | A vulnerability in the web-based ma | cvebase.io