Cisco Content Security Management Appliance Open Redirect Multiple Vulnerabilities (cisco-sa-sma-opn-rdrct-yPPMdsMQ)

medium Nessus Plugin ID 136748

Language:

Synopsis

The remote device is missing a vendor-supplied security patch

Description

According to its self-reported version, Cisco Content Security Management Appliance (SMA) is affected by multiple vulnerabilities in the web-based GUI due to improper input validation of the parameters of an HTTP request. An unauthenticated, remote attacker can exploit these, by intercepting an HTTP request and modifying it to redirect a user to a specific malicious URL, in order to redirect the user to a malicious web page or to obtain sensitive browser-based information.

Please see the included Cisco BIDs and Cisco Security Advisory for more information.

Solution

Upgrade to the relevant fixed version referenced in Cisco bug IDs CSCvq83107, CSCvr82721

Plugin Details

Severity: Medium

ID: 136748

File Name: cisco-sa-sma-opn-rdrct-yPPMdsMQ.nasl

Version: 1.10

Type: combined

Family: CISCO

Published: 5/21/2020

Updated: 3/29/2021

Supported Sensors: Nessus

Risk Information

CVSS Score Rationale: Based on vendor advisory

VPR

Risk Factor: Low

Score: 3.0

CVSS v2

Risk Factor: Medium

Base Score: 5.8

Temporal Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:N

CVSS Score Source: CVE-2020-3178

CVSS v3

Risk Factor: Medium

Base Score: 6.1

Temporal Score: 5.3

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Required KB Items: Host/AsyncOS/Cisco Content Security Management Appliance/DisplayVersion, Host/AsyncOS/Cisco Content Security Management Appliance/Version

Exploit Ease: No known exploits are available

Patch Publication Date: 5/6/2020

Vulnerability Publication Date: 5/6/2020

Reference Information

CVE: CVE-2020-3178

CWE: 601

CISCO-SA: cisco-sa-sma-opn-rdrct-yPPMdsMQ

IAVA: 2020-A-0218-S

CISCO-BUG-ID: CSCvq83107, CSCvr82721

Detections

Analytics