Remote Access Vulnerability in Cisco Email Security Appliance and Content Security Management Appliance

CVE-2018-0140

Summary

A vulnerability exists in the spam quarantine feature of Cisco Email Security Appliance and Cisco Content Security Management Appliance. It can be exploited by an authenticated, remote attacker who can manipulate browser string information to gain unauthorized access to messages in the spam quarantine. This vulnerability arises from insufficient verification of user accounts, enabling attackers to view quarantined messages submitted by other users within the organization. It underscores the need for robust security measures to protect sensitive information from unauthorized access.

References