PT-2022-5525 · Cisco · Cisco Secure Web Appliance+2
Sam Coleman
·
Published
2022-11-02
·
Updated
2024-01-25
·
CVE-2022-20942
CVSS v2.0
6.8
Medium
| Vector | AV:N/AC:L/Au:S/C:C/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Cisco Email Security Appliance (ESA) (affected versions not specified)
Cisco Secure Email and Web Manager (affected versions not specified)
Cisco Secure Web Appliance (affected versions not specified)
Description
The issue is related to errors in authorization within the web-based management interface of the affected Cisco products. This could allow a remote attacker to disclose protected information by sending a specially crafted HTTP request. The vulnerability is due to weak enforcement of back-end authorization checks, which could enable an attacker to retrieve sensitive information, including user credentials, from an affected device.
Recommendations
For Cisco Email Security Appliance (ESA), update to a version that fixes the authorization weakness.
For Cisco Secure Email and Web Manager, restrict access to the web-based management interface until a patch is available.
For Cisco Secure Web Appliance, consider disabling the vulnerable web-based management interface functionality as a temporary workaround until a fix is released.
Avoid using the web-based management interface for sensitive operations until the issue is resolved.
Fix
Incorrect Authorization
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Cisco Email Security Appliance
Cisco Secure Email/Web Manager
Cisco Secure Web Appliance