Privilege Escalation in Cisco Content Security Management Appliance

CVE-2015-4322

Summary

The Cisco Content Security Management Appliance suffers from a privilege escalation vulnerability that arises due to inadequate restrictions on user permissions following LDAP authentication. This flaw permits remote authenticated users to access the Spam Quarantine folders of other users. By exploiting this vulnerability through a spam-notification URL, malicious actors could read or modify sensitive information from arbitrary users’ quarantined spam messages, thereby compromising the privacy and integrity of user data.

References