What is CVE-2020-3447?

CVE-2020-3447 is a medium-severity vulnerability in Cisco Email Security Appliance (Esa), classified under Insertion of Sensitive Information into Log File. CVSS score: 5.5/10. Published 2020-08-17.

How severe is CVE-2020-3447?

Medium severity. CVSS v3 base score is 5.5 out of 10.

Information disclosure in Cisco Email Security Appliance (Esa)

CVE-2020-3447

A vulnerability in the CLI of Cisco AsyncOS for Cisco Email Security Appliance (ESA) and Cisco AsyncOS for Cisco Content Security Management Appliance (SMA) could allow an authenticated, remote attacker to access sensitive information on a…

EPSS: 0.007 (50.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L.

Affected products

Weakness classification (CWE)

CWE-532 — Insertion of Sensitive Information into Log File

References

psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2020-3447?: CVE-2020-3447 is a medium-severity vulnerability in Cisco Email Security Appliance (Esa), classified under Insertion of Sensitive Information into Log File. CVSS score: 5.5/10. Published 2020-08-17.
How severe is CVE-2020-3447?: Medium severity. CVSS v3 base score is 5.5 out of 10.