Skip to content
fr Sign in
4.3 Medium

CVE-2019-12635 A vulnerability in the authorization module of Cisco Content Security Management Appliance (SMA) Software could allow an…

Description

A vulnerability in the authorization module of Cisco Content Security Management Appliance (SMA) Software could allow an authenticated, remote attacker to gain out-of-scope access to email. The vulnerability exists because the affected software does not correctly implement role permission controls. An attacker could exploit this vulnerability by using a custom role with specific permissions. A successful exploit could allow the attacker to access the spam quarantine of other users.

Affected products and versions

Product Affected versions Fixed in
Cisco Content Security Management Appliance (SMA) 12.5 earliest → < 12.5.0 12.5.0

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Cisco Content Security Management Appliance (SMA)

The 5 CVEs of Cisco Content Security Management Appliance (SMA) →
CVE-2021-1561 A vulnerability in the spam quarantine feature of Cisco Secure Email and Web Manager, formerly Cisco Security Management… 5.4 Medium CVE-2021-1447 A vulnerability in the user account management system of Cisco AsyncOS for Cisco Content Security Management Appliance… 6.7 Medium CVE-2020-3178 Multiple vulnerabilities in the web-based GUI of Cisco AsyncOS Software for Cisco Content Security Management… 6.1 Medium CVE-2018-15393 A vulnerability in the web-based management interface of Cisco Content Security Management Appliance (SMA) Software… 4.8 Medium
Track this CVE