CVE-2015-4322

Cisco Content Security Management Appliance 8.3.6-039/9.1.0-31/9.1.0-103 - Authenticated LDAP Spam Quarantine Access

Title source: llm
STIX 2.1

Description

Cisco Content Security Management Appliance (SMA) 8.3.6-039, 9.1.0-31, and 9.1.0-103 improperly restricts the privileges available after LDAP authentication, which allows remote authenticated users to read or write to an arbitrary user's Spam Quarantine folder by visiting a spam-notification URL, aka Bug ID CSCuv65894.

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/76365
Vendor Advisory vendor-advisory x_refsource_cisco
http://tools.cisco.com/security/center/viewAlert.x?alertId=40450
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1033322

Scores

EPSS 0.0170
EPSS Percentile 74.8%

Details

CWE
CWE-264
Status published
Products (3)
cisco/content_security_management_appliance 8.3.6-039
cisco/content_security_management_appliance 9.1.0-31
cisco/content_security_management_appliance 9.1.0-103
Published Aug 19, 2015
Tracked Since Feb 18, 2026