{"id":47229,"date":"2022-06-23T18:08:00","date_gmt":"2022-06-23T18:08:00","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/cisco-reports-vulnerabilities-in-products-including-email-and-web-manager\/"},"modified":"2022-06-23T18:08:00","modified_gmt":"2022-06-23T18:08:00","slug":"cisco-reports-vulnerabilities-in-products-including-email-and-web-manager","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/cisco-reports-vulnerabilities-in-products-including-email-and-web-manager\/","title":{"rendered":"Cisco reports vulnerabilities in products including email and web manager"},"content":{"rendered":"
<\/div>\n

Cisco has issued alerts for a vulnerability found in its email security and web management products that could allow an authenticated remote actor to retrieve sensitive information from an affected device.<\/p>\n

An advisory issued by Cisco this week outlined that the vulnerability\u2014detected in the web management interface of Cisco Secure Email and Web Manager, known formerly as Cisco Security Management Appliance (CSMA), and Cisco Email Security Appliance (ESA)\u2014allows an authenticated actor to extract sensitive information through a Lightweight Directory Access Protocol (LDAP) server connected to the affected device.<\/p>\n

This vulnerability is due to a design oversight in the querying process, according to Cisco. LDAP is an external authentication protocol for accessing and maintaining distributed directory information services on the public internet or corporate intranet.<\/p>\n

No public exploitation discovered (yet)<\/h2>\n

The vulnerability was found during internal security testing and until the time of publishing the advisory<\/a> Tuesday Cisco’s team was unaware of any public announcement or exploitation of the vulnerability, the company said.<\/p>\n

According to the advisory, the vulnerability has received a 7.7 CVSS score and has no workarounds. The vulnerability, with bug IDs CSCvz20942 and CSCvz40090 for virtual and hardware appliances, respectively, can be exploited provided they:<\/p>\n