PT-2018-8640 · Cisco · Cisco Email Security Appliance+1

Published 2018-02-08 · Updated 2023-02-21 · CVE-2018-0140

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Cisco Email Security Appliance (affected versions not specified) Cisco Content Security Management Appliance (affected versions not specified)

Description: A issue in the spam quarantine could allow an authenticated, remote attacker to download any message from the spam quarantine by modifying browser string information. This is due to a lack of verification of authenticated user accounts. An attacker could exploit this by modifying browser strings to see messages submitted by other users to the spam quarantine within their company.

Recommendations: For Cisco Email Security Appliance, update to a version that includes the fix for the issue. For Cisco Content Security Management Appliance, update to a version that includes the fix for the issue. As a temporary workaround, consider restricting access to the spam quarantine feature until a patch is available.

Fix

Information Disclosure

Weakness Enumeration

CWE-425

CWE-200

Related Identifiers

CVE-2018-0140

Affected Products

Cisco Content Security Management Appliance

Cisco Email Security Appliance

References · 6

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180207-esacsm · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-0140 · Security Note
• https://osv.dev/vulnerability/CVE-2018-0140 · Vendor Advisory
• http://securitytracker.com/id/1040338 · Note
• http://securitytracker.com/id/1040339 · Note
• http://securityfocus.com/bid/103090 · Note