PT-2022-2919 · Cisco · Cisco Secure Email/Web Manager

Published 2022-06-15 · Updated 2022-06-27 · CVE-2022-20798

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cisco Secure Email and Web Manager versions (affected versions not specified)

Description A vulnerability in the external authentication functionality of Cisco Secure Email and Web Manager is related to improper authentication checks when using Lightweight Directory Access Protocol (LDAP) for external authentication. This could allow an unauthenticated, remote attacker to bypass authentication and log in to the web management interface of an affected device. An attacker could exploit this vulnerability by entering a specific input on the login page of the affected device. A successful exploit could allow the attacker to gain unauthorized access to the web-based management interface of the affected device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

BDU:2022-03520

CVE-2022-20798

Affected Products

Cisco Secure Email/Web Manager

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2022-20798 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sma-esa-auth-bypass-66kEcxQD · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-20798 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-03520 · Security Note
• https://t.me/true_secator/3068 · Telegram Post
• https://t.me/echeloneyes/364 · Telegram Post