PT-2019-2127 · Cisco · Cisco Email Security Appliance

Publicado 2019-04-17 · Atualizado 2019-10-09 · CVE-2019-1831

Positive Technologies (AI Summary)

CVSS v3.1

5.8

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Cisco Email Security Appliance (ESA) versions (affected versions not specified)

Description The issue is related to insufficient input validation in the email message scanning function. This could allow a remote attacker to bypass configured content filters on the device by inserting specific character strings in the email body. The attacker may exploit this to affect the integrity of protected information.

Recommendations For Cisco Email Security Appliance (ESA), consider restricting the email message scanning function until a patch is available. As a temporary workaround, avoid using specific character strings in the email body that could be used to bypass content filters. Restrict access to the email scanning module to minimize the risk of exploitation.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

BDU:2019-01888

CVE-2019-1831

Produtos afetados

Cisco Email Security Appliance

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2019-1831 · Nota de Segurança
• https://bdu.fstec.ru/vul/2019-01888 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-1831 · Aviso do Fabricante
• http://securityfocus.com/bid/108021 · Nota
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190417-esa-filter-bypass · Aviso do Fabricante