CVE-2018-0140 (GCVE-0-2018-0140)

Vulnerability from cvelistv5 – Published: 2018-02-08 07:00 – Updated: 2024-12-02 21:08
VLAI?
Summary
A vulnerability in the spam quarantine of Cisco Email Security Appliance and Cisco Content Security Management Appliance could allow an authenticated, remote attacker to download any message from the spam quarantine by modifying browser string information. The vulnerability is due to a lack of verification of authenticated user accounts. An attacker could exploit this vulnerability by modifying browser strings to see messages submitted by other users to the spam quarantine within their company. Cisco Bug IDs: CSCvg39759, CSCvg42295.
Severity ?
No CVSS data available.
CWE
Assigner
References
Impacted products
Vendor Product Version
n/a Cisco Email Security Appliance and Cisco Content Security Management Appliance Affected: Cisco Email Security Appliance and Cisco Content Security Management Appliance
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T03:14:16.872Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1040339",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1040339"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180207-esacsm"
          },
          {
            "name": "103090",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/103090"
          },
          {
            "name": "1040338",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1040338"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2018-0140",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-12-02T18:55:19.184419Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-12-02T21:08:30.247Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Cisco Email Security Appliance and Cisco Content Security Management Appliance",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Cisco Email Security Appliance and Cisco Content Security Management Appliance"
            }
          ]
        }
      ],
      "datePublic": "2018-02-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the spam quarantine of Cisco Email Security Appliance and Cisco Content Security Management Appliance could allow an authenticated, remote attacker to download any message from the spam quarantine by modifying browser string information. The vulnerability is due to a lack of verification of authenticated user accounts. An attacker could exploit this vulnerability by modifying browser strings to see messages submitted by other users to the spam quarantine within their company. Cisco Bug IDs: CSCvg39759, CSCvg42295."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-200",
              "description": "CWE-200",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-02-22T10:57:01",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "1040339",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1040339"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180207-esacsm"
        },
        {
          "name": "103090",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/103090"
        },
        {
          "name": "1040338",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1040338"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@cisco.com",
          "ID": "CVE-2018-0140",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Cisco Email Security Appliance and Cisco Content Security Management Appliance",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Cisco Email Security Appliance and Cisco Content Security Management Appliance"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A vulnerability in the spam quarantine of Cisco Email Security Appliance and Cisco Content Security Management Appliance could allow an authenticated, remote attacker to download any message from the spam quarantine by modifying browser string information. The vulnerability is due to a lack of verification of authenticated user accounts. An attacker could exploit this vulnerability by modifying browser strings to see messages submitted by other users to the spam quarantine within their company. Cisco Bug IDs: CSCvg39759, CSCvg42295."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-200"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1040339",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1040339"
            },
            {
              "name": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180207-esacsm",
              "refsource": "CONFIRM",
              "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180207-esacsm"
            },
            {
              "name": "103090",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/103090"
            },
            {
              "name": "1040338",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1040338"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2018-0140",
    "datePublished": "2018-02-08T07:00:00",
    "dateReserved": "2017-11-27T00:00:00",
    "dateUpdated": "2024-12-02T21:08:30.247Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "fkie_nvd": {
      "configurations": "[{\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:cisco:email_security_appliance_firmware:9.8.0-112:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6207857A-D150-4D91-AC50-5FCA71E4530A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:cisco:email_security_appliance_firmware:10.0.1-087:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"8908CBEB-F0FF-4F63-B19B-4BF34AB23A14\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:cisco:email_security_appliance_firmware:11.0.0-274:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"57B6BB66-1B7A-4F80-B8E3-D8F7E8F1AF4C\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:cisco:email_security_appliance_c160:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"50009089-506D-42B4-B34D-CFC719B0395B\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:cisco:email_security_appliance_c170:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0E5FD72D-E9E6-451C-9483-EBFDD41C9336\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:cisco:email_security_appliance_c190:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A2C890DD-36BE-416F-B0D3-FB8AAD5F03BD\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:cisco:email_security_appliance_c370:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B8ED62C8-2B7E-47CA-BE16-00E02CA72763\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:cisco:email_security_appliance_c370d:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"93AF10FC-7988-446F-86E6-8A4E90762DA0\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:cisco:email_security_appliance_c380:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CBA19FA3-6CFE-4D6A-A987-CE49A650BE3E\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:cisco:email_security_appliance_c390:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"675068B9-167C-42F9-87DD-FF0146B8ADDC\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:cisco:email_security_appliance_c670:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A1149EA5-37D0-4E1F-803D-A7A0658653FE\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:cisco:email_security_appliance_c680:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1A2334C4-812A-4C28-B708-EA969C05D4C1\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:cisco:email_security_appliance_c690:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4BA67042-D6DD-436D-9E41-475CBD670940\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:cisco:email_security_appliance_c690x:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"57AFD49E-F367-4776-85B8-6BD7F57D78C9\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:cisco:email_security_appliance_x1070:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E312DF25-A961-4682-B374-4A394431F8E3\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:cisco:content_security_management_appliance:10.0.0-096:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DD007BF4-5962-42EF-B374-64752149ACE4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:cisco:content_security_management_appliance:10.1.0-037:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D30D450A-E060-41EA-890A-F3C0616006BD\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:cisco:content_security_management_appliance:10.1.0-052:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9BDC7E17-A545-4D87-857A-C545D82AE078\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:cisco:content_security_management_appliance:11.0.0-115:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"70BB0721-EA85-4EF0-B794-307FC690ECDC\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:cisco:content_security_management_appliance_sma_m190:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"14B41A69-AFB0-4770-A8F4-82393F5B330F\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:cisco:content_security_management_appliance_sma_m390:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3526625B-A42B-4529-B9A5-5BA4CC38DAA9\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:cisco:content_security_management_appliance_sma_m390x:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A9C3E48C-9A68-4BC7-9C1B-E651F6DCCBC2\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:cisco:content_security_management_appliance_sma_m690:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CEEF3CE3-2A24-42CB-B73E-A6C6333A93E8\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:cisco:content_security_management_appliance_sma_m690x:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2FB17773-455A-42B0-822F-B43EF0CB9D7E\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"A vulnerability in the spam quarantine of Cisco Email Security Appliance and Cisco Content Security Management Appliance could allow an authenticated, remote attacker to download any message from the spam quarantine by modifying browser string information. The vulnerability is due to a lack of verification of authenticated user accounts. An attacker could exploit this vulnerability by modifying browser strings to see messages submitted by other users to the spam quarantine within their company. Cisco Bug IDs: CSCvg39759, CSCvg42295.\"}, {\"lang\": \"es\", \"value\": \"Una vulnerabilidad en la cuarentena de spam de Cisco Email Security Appliance y Cisco Content Security Management Appliance podr\\u00eda permitir que un atacante remoto autenticado descargue cualquier mensaje de la cuarentena de spam modificando la informaci\\u00f3n de las cadenas del navegador. Esta vulnerabilidad se debe a la ausencia de validaci\\u00f3n de cuentas de usuario autenticado. Un atacante podr\\u00eda explotar esta vulnerabilidad modificando cadenas del navegador para ver mensajes enviados por otros usuarios a la cuarentena de spam en su compa\\u00f1\\u00eda. Cisco Bug IDs: CSCvg39759, CSCvg42295.\"}]",
      "id": "CVE-2018-0140",
      "lastModified": "2024-11-21T03:37:35.953",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N\", \"baseScore\": 6.5, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"LOW\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"NONE\"}, \"exploitabilityScore\": 2.8, \"impactScore\": 3.6}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:L/Au:S/C:P/I:N/A:N\", \"baseScore\": 4.0, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"LOW\", \"authentication\": \"SINGLE\", \"confidentialityImpact\": \"PARTIAL\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"NONE\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 8.0, \"impactScore\": 2.9, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
      "published": "2018-02-08T07:29:01.053",
      "references": "[{\"url\": \"http://www.securityfocus.com/bid/103090\", \"source\": \"ykramarz@cisco.com\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.securitytracker.com/id/1040338\", \"source\": \"ykramarz@cisco.com\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.securitytracker.com/id/1040339\", \"source\": \"ykramarz@cisco.com\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180207-esacsm\", \"source\": \"ykramarz@cisco.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://www.securityfocus.com/bid/103090\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.securitytracker.com/id/1040338\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.securitytracker.com/id/1040339\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180207-esacsm\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}]",
      "sourceIdentifier": "ykramarz@cisco.com",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"ykramarz@cisco.com\", \"type\": \"Secondary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-200\"}]}, {\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-425\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2018-0140\",\"sourceIdentifier\":\"psirt@cisco.com\",\"published\":\"2018-02-08T07:29:01.053\",\"lastModified\":\"2024-11-21T03:37:35.953\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A vulnerability in the spam quarantine of Cisco Email Security Appliance and Cisco Content Security Management Appliance could allow an authenticated, remote attacker to download any message from the spam quarantine by modifying browser string information. The vulnerability is due to a lack of verification of authenticated user accounts. An attacker could exploit this vulnerability by modifying browser strings to see messages submitted by other users to the spam quarantine within their company. Cisco Bug IDs: CSCvg39759, CSCvg42295.\"},{\"lang\":\"es\",\"value\":\"Una vulnerabilidad en la cuarentena de spam de Cisco Email Security Appliance y Cisco Content Security Management Appliance podr\u00eda permitir que un atacante remoto autenticado descargue cualquier mensaje de la cuarentena de spam modificando la informaci\u00f3n de las cadenas del navegador. Esta vulnerabilidad se debe a la ausencia de validaci\u00f3n de cuentas de usuario autenticado. Un atacante podr\u00eda explotar esta vulnerabilidad modificando cadenas del navegador para ver mensajes enviados por otros usuarios a la cuarentena de spam en su compa\u00f1\u00eda. Cisco Bug IDs: CSCvg39759, CSCvg42295.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N\",\"baseScore\":6.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.8,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:S/C:P/I:N/A:N\",\"baseScore\":4.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"SINGLE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.0,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"psirt@cisco.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-200\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-425\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:email_security_appliance_firmware:9.8.0-112:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6207857A-D150-4D91-AC50-5FCA71E4530A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:email_security_appliance_firmware:10.0.1-087:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8908CBEB-F0FF-4F63-B19B-4BF34AB23A14\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:email_security_appliance_firmware:11.0.0-274:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"57B6BB66-1B7A-4F80-B8E3-D8F7E8F1AF4C\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:email_security_appliance_c160:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"50009089-506D-42B4-B34D-CFC719B0395B\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:email_security_appliance_c170:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0E5FD72D-E9E6-451C-9483-EBFDD41C9336\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:email_security_appliance_c190:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A2C890DD-36BE-416F-B0D3-FB8AAD5F03BD\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:email_security_appliance_c370:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B8ED62C8-2B7E-47CA-BE16-00E02CA72763\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:email_security_appliance_c370d:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"93AF10FC-7988-446F-86E6-8A4E90762DA0\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:email_security_appliance_c380:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CBA19FA3-6CFE-4D6A-A987-CE49A650BE3E\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:email_security_appliance_c390:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"675068B9-167C-42F9-87DD-FF0146B8ADDC\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:email_security_appliance_c670:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A1149EA5-37D0-4E1F-803D-A7A0658653FE\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:email_security_appliance_c680:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1A2334C4-812A-4C28-B708-EA969C05D4C1\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:email_security_appliance_c690:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4BA67042-D6DD-436D-9E41-475CBD670940\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:email_security_appliance_c690x:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"57AFD49E-F367-4776-85B8-6BD7F57D78C9\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:email_security_appliance_x1070:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E312DF25-A961-4682-B374-4A394431F8E3\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:content_security_management_appliance:10.0.0-096:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DD007BF4-5962-42EF-B374-64752149ACE4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:content_security_management_appliance:10.1.0-037:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D30D450A-E060-41EA-890A-F3C0616006BD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:content_security_management_appliance:10.1.0-052:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9BDC7E17-A545-4D87-857A-C545D82AE078\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:content_security_management_appliance:11.0.0-115:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"70BB0721-EA85-4EF0-B794-307FC690ECDC\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:content_security_management_appliance_sma_m190:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"14B41A69-AFB0-4770-A8F4-82393F5B330F\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:content_security_management_appliance_sma_m390:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3526625B-A42B-4529-B9A5-5BA4CC38DAA9\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:content_security_management_appliance_sma_m390x:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A9C3E48C-9A68-4BC7-9C1B-E651F6DCCBC2\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:content_security_management_appliance_sma_m690:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CEEF3CE3-2A24-42CB-B73E-A6C6333A93E8\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:content_security_management_appliance_sma_m690x:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2FB17773-455A-42B0-822F-B43EF0CB9D7E\"}]}]}],\"references\":[{\"url\":\"http://www.securityfocus.com/bid/103090\",\"source\":\"psirt@cisco.com\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1040338\",\"source\":\"psirt@cisco.com\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1040339\",\"source\":\"psirt@cisco.com\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180207-esacsm\",\"source\":\"psirt@cisco.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/103090\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1040338\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1040339\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180207-esacsm\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]}]}}",
    "vulnrichment": {
      "containers": "{\"cna\": {\"affected\": [{\"product\": \"Cisco Email Security Appliance and Cisco Content Security Management Appliance\", \"vendor\": \"n/a\", \"versions\": [{\"status\": \"affected\", \"version\": \"Cisco Email Security Appliance and Cisco Content Security Management Appliance\"}]}], \"datePublic\": \"2018-02-08T00:00:00\", \"descriptions\": [{\"lang\": \"en\", \"value\": \"A vulnerability in the spam quarantine of Cisco Email Security Appliance and Cisco Content Security Management Appliance could allow an authenticated, remote attacker to download any message from the spam quarantine by modifying browser string information. The vulnerability is due to a lack of verification of authenticated user accounts. An attacker could exploit this vulnerability by modifying browser strings to see messages submitted by other users to the spam quarantine within their company. Cisco Bug IDs: CSCvg39759, CSCvg42295.\"}], \"problemTypes\": [{\"descriptions\": [{\"cweId\": \"CWE-200\", \"description\": \"CWE-200\", \"lang\": \"en\", \"type\": \"CWE\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2018-02-22T10:57:01\", \"orgId\": \"d1c1063e-7a18-46af-9102-31f8928bc633\", \"shortName\": \"cisco\"}, \"references\": [{\"name\": \"1040339\", \"tags\": [\"vdb-entry\", \"x_refsource_SECTRACK\"], \"url\": \"http://www.securitytracker.com/id/1040339\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180207-esacsm\"}, {\"name\": \"103090\", \"tags\": [\"vdb-entry\", \"x_refsource_BID\"], \"url\": \"http://www.securityfocus.com/bid/103090\"}, {\"name\": \"1040338\", \"tags\": [\"vdb-entry\", \"x_refsource_SECTRACK\"], \"url\": \"http://www.securitytracker.com/id/1040338\"}], \"x_legacyV4Record\": {\"CVE_data_meta\": {\"ASSIGNER\": \"psirt@cisco.com\", \"ID\": \"CVE-2018-0140\", \"STATE\": \"PUBLIC\"}, \"affects\": {\"vendor\": {\"vendor_data\": [{\"product\": {\"product_data\": [{\"product_name\": \"Cisco Email Security Appliance and Cisco Content Security Management Appliance\", \"version\": {\"version_data\": [{\"version_value\": \"Cisco Email Security Appliance and Cisco Content Security Management Appliance\"}]}}]}, \"vendor_name\": \"n/a\"}]}}, \"data_format\": \"MITRE\", \"data_type\": \"CVE\", \"data_version\": \"4.0\", \"description\": {\"description_data\": [{\"lang\": \"eng\", \"value\": \"A vulnerability in the spam quarantine of Cisco Email Security Appliance and Cisco Content Security Management Appliance could allow an authenticated, remote attacker to download any message from the spam quarantine by modifying browser string information. The vulnerability is due to a lack of verification of authenticated user accounts. An attacker could exploit this vulnerability by modifying browser strings to see messages submitted by other users to the spam quarantine within their company. Cisco Bug IDs: CSCvg39759, CSCvg42295.\"}]}, \"problemtype\": {\"problemtype_data\": [{\"description\": [{\"lang\": \"eng\", \"value\": \"CWE-200\"}]}]}, \"references\": {\"reference_data\": [{\"name\": \"1040339\", \"refsource\": \"SECTRACK\", \"url\": \"http://www.securitytracker.com/id/1040339\"}, {\"name\": \"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180207-esacsm\", \"refsource\": \"CONFIRM\", \"url\": \"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180207-esacsm\"}, {\"name\": \"103090\", \"refsource\": \"BID\", \"url\": \"http://www.securityfocus.com/bid/103090\"}, {\"name\": \"1040338\", \"refsource\": \"SECTRACK\", \"url\": \"http://www.securitytracker.com/id/1040338\"}]}}}, \"adp\": [{\"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-05T03:14:16.872Z\"}, \"title\": \"CVE Program Container\", \"references\": [{\"name\": \"1040339\", \"tags\": [\"vdb-entry\", \"x_refsource_SECTRACK\", \"x_transferred\"], \"url\": \"http://www.securitytracker.com/id/1040339\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180207-esacsm\"}, {\"name\": \"103090\", \"tags\": [\"vdb-entry\", \"x_refsource_BID\", \"x_transferred\"], \"url\": \"http://www.securityfocus.com/bid/103090\"}, {\"name\": \"1040338\", \"tags\": [\"vdb-entry\", \"x_refsource_SECTRACK\", \"x_transferred\"], \"url\": \"http://www.securitytracker.com/id/1040338\"}]}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2018-0140\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-12-02T18:55:19.184419Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-12-02T19:00:12.028Z\"}}]}",
      "cveMetadata": "{\"assignerOrgId\": \"d1c1063e-7a18-46af-9102-31f8928bc633\", \"assignerShortName\": \"cisco\", \"cveId\": \"CVE-2018-0140\", \"datePublished\": \"2018-02-08T07:00:00\", \"dateReserved\": \"2017-11-27T00:00:00\", \"dateUpdated\": \"2024-12-02T21:08:30.247Z\", \"state\": \"PUBLISHED\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.