Auth bypass in Cisco Content Security Management Appliance (Sma)

CVE-2021-1561

A vulnerability in the spam quarantine feature of Cisco Secure Email and Web Manager, formerly Cisco Security Management Appliance (SMA), could allow an authenticated, remote attacker to gain unauthorized access and modify the spam quarant…

EPSS: 0.007 (50.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.4 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N.

Affected products

Weakness classification (CWE)

References

  • psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Patch, Vendor Advisory)

Frequently asked questions

What is CVE-2021-1561?
CVE-2021-1561 is a medium-severity vulnerability in Cisco Content Security Management Appliance (Sma), classified under Authentication Bypass by Assumed-Immutable Data. CVSS score: 5.4/10. Published 2021-08-18.
How severe is CVE-2021-1561?
Medium severity. CVSS v3 base score is 5.4 out of 10.