CVE-2015-4322

Cisco Content Security Management Appliance (SMA) 8.3.6-039, 9.1.0-31, and 9.1.0-103 improperly restricts the privileges available after LDAP authentication…

published August 19, 2015

CVSS
—
EPSS
2%
Percentile
77.0
In the wild
Unconfirmed
What it is

Cisco Content Security Management Appliance (SMA) 8.3.6-039, 9.1.0-31, and 9.1.0-103 improperly restricts the privileges available after LDAP authentication, which allows remote authenticated users to read or write to an arbitrary user's Spam Quarantine folder by visiting a spam-notification URL, aka Bug ID CSCuv65894.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01697 · 77.0th percentile
Published
2015-08-19T15:00Z
EPSS history
Timeline
  • 19 AUG 15:00Z
    Cisco Content Security Management Appliance (SMA) 8.3.6-039, 9.1.0-31, and 9.1.0-103 improperly restricts the privileges available after LDAP authentication…
    cvelistv5