PT-2021-1830 · Cisco · Cisco Content Security Management Appliance+2

Published 2021-01-20 · Updated 2021-01-27 · CVE-2021-1129

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco Email Security Appliance (affected versions not specified) Cisco Content Security Management Appliance (affected versions not specified) Cisco Web Security Appliance (affected versions not specified)

Description The issue is related to a lack of authentication token requirement in the API component of the affected systems, which could allow a remote attacker to gain unauthorized access to protected information. An attacker could exploit this by sending a crafted request to the general purpose API, potentially resulting in the disclosure of system and configuration information.

Recommendations For Cisco Email Security Appliance, consider restricting access to the general purpose API until a fix is available. For Cisco Content Security Management Appliance, consider disabling unnecessary API endpoints to minimize the risk of exploitation. For Cisco Web Security Appliance, avoid using the API for sensitive operations until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-201

Related Identifiers

BDU:2021-00588

CVE-2021-1129

Affected Products

Cisco Content Security Management Appliance

Cisco Email Security Appliance

Cisco Web Security Appliance

References · 4

• https://osv.dev/vulnerability/CVE-2021-1129 · Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-wsa-sma-info-RHp44vAC · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-00588 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-1129 · Security Note