CVE-2022-20942

Severity Score

6.5

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

A vulnerability in the web-based management interface of Cisco Email Security Appliance (ESA), Cisco Secure Email and Web Manager, and Cisco Secure Web Appliance, formerly known as Cisco Web Security Appliance (WSA), could allow an authenticated, remote attacker to retrieve sensitive information from an affected device, including user credentials.
This vulnerability is due to weak enforcement of back-end authorization checks. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to obtain confidential data that is stored on the affected device.

Una vulnerabilidad en la interfaz de administración basada en web de Cisco Email Security Appliance (ESA), Cisco Secure Email and Web Manager y Cisco Secure Web Appliance, anteriormente conocido como Cisco Web Security Appliance (WSA), podría permitir que un atacante remoto autenticado acceda a información sensible de un dispositivo afectado, incluidas las credenciales de usuario. Esta vulnerabilidad se debe a una aplicación débil de las comprobaciones de autorización del back-end. Un atacante podría aprovechar esta vulnerabilidad enviando una solicitud HTTP manipulada a un dispositivo afectado. Un exploit exitoso podría permitir al atacante obtener datos confidenciales almacenados en el dispositivo afectado.

*Credits: N/A

CVSS Scores

NISTv3.1 6.5

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2021-11-02 CVE Reserved
2022-11-03 CVE Published
2024-08-03 CVE Updated
2024-10-18 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-359: Exposure of Private Personal Information to an Unauthorized Actor
CWE-863: Incorrect Authorization

CAPEC

References (1)

URL	Tag	Source
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cnt-sec-infodiscl-BVKKnUG

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Cisco Search vendor "Cisco"	Asyncos Search vendor "Cisco" for product "Asyncos"	< 14.2.1-015 Search vendor "Cisco" for product "Asyncos" and version " < 14.2.1-015"	-	Affected	in	Cisco Search vendor "Cisco"	Secure Email Gateway Search vendor "Cisco" for product "Secure Email Gateway"	-	-	Safe
Cisco Search vendor "Cisco"	Asyncos Search vendor "Cisco" for product "Asyncos"	>= 14.3.0 < 14.3.0-023 Search vendor "Cisco" for product "Asyncos" and version " >= 14.3.0 < 14.3.0-023"	-	Affected	in	Cisco Search vendor "Cisco"	Secure Email Gateway Search vendor "Cisco" for product "Secure Email Gateway"	-	-	Safe
Cisco Search vendor "Cisco"	Asyncos Search vendor "Cisco" for product "Asyncos"	< 14.2.0-217 Search vendor "Cisco" for product "Asyncos" and version " < 14.2.0-217"	-	Affected	in	Cisco Search vendor "Cisco"	Secure Email And Web Manager Search vendor "Cisco" for product "Secure Email And Web Manager"	-	-	Safe
Cisco Search vendor "Cisco"	Asyncos Search vendor "Cisco" for product "Asyncos"	>= 14.3.0 < 14.3.0-115 Search vendor "Cisco" for product "Asyncos" and version " >= 14.3.0 < 14.3.0-115"	-	Affected	in	Cisco Search vendor "Cisco"	Secure Email And Web Manager Search vendor "Cisco" for product "Secure Email And Web Manager"	-	-	Safe
Cisco Search vendor "Cisco"	Asyncos Search vendor "Cisco" for product "Asyncos"	< 12.0.5-011 Search vendor "Cisco" for product "Asyncos" and version " < 12.0.5-011"	-	Affected	in	Cisco Search vendor "Cisco"	Secure Web Appliance Search vendor "Cisco" for product "Secure Web Appliance"	-	-	Safe
Cisco Search vendor "Cisco"	Asyncos Search vendor "Cisco" for product "Asyncos"	>= 12.5 < 12.5.4-005 Search vendor "Cisco" for product "Asyncos" and version " >= 12.5 < 12.5.4-005"	-	Affected	in	Cisco Search vendor "Cisco"	Secure Web Appliance Search vendor "Cisco" for product "Secure Web Appliance"	-	-	Safe
Cisco Search vendor "Cisco"	Asyncos Search vendor "Cisco" for product "Asyncos"	>= 14.0 < 14.0.2-012 Search vendor "Cisco" for product "Asyncos" and version " >= 14.0 < 14.0.2-012"	-	Affected	in	Cisco Search vendor "Cisco"	Secure Web Appliance Search vendor "Cisco" for product "Secure Web Appliance"	-	-	Safe