PT-2021-3258 · Cisco · Cisco Email Security Appliance+3

Rakshith Rajanna · Published 2021-05-05 · Updated 2021-05-14 · CVE-2021-1516

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco AsyncOS Software for Cisco Content Security Management Appliance (SMA), Cisco Email Security Appliance (ESA), and Cisco Web Security Appliance (WSA) (affected versions not specified)

Description The issue is related to insufficient protection of sensitive data in the source code of the web-based management interface. This could allow a remote attacker to gain unauthorized access to protected information using specially crafted HTTP requests. The vulnerability exists because confidential information is included in HTTP requests exchanged between the user and the device. An attacker could exploit this by examining the raw HTTP requests sent to the interface, potentially obtaining some configured passwords.

Recommendations For Cisco AsyncOS Software, consider restricting access to the web-based management interface until a fix is available. As a temporary workaround, avoid using the web-based management interface for sensitive operations until the issue is resolved. Restrict access to sensitive information on affected devices to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-540

Related Identifiers

BDU:2021-02991

CVE-2021-1516

Affected Products

Cisco Asyncos

Cisco Content Security Management Appliance

Cisco Email Security Appliance

Cisco Web Security Appliance

References · 4

• https://osv.dev/vulnerability/CVE-2021-1516 · Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-wsa-sma-info-gY2AEz2H · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-1516 · Security Note
• https://bdu.fstec.ru/vul/2021-02991 · Security Note