Description (CNA)
A vulnerability in Simple Network Management Protocol (SNMP) polling for Cisco Secure Email and Web Manager, Cisco Secure Email Gateway, and Cisco Secure Web Appliance could allow an authenticated, remote attacker to obtain confidential information about the underlying operating system. This vulnerability exists because the appliances do not protect confidential information at rest in response to SNMP poll requests. An attacker could exploit this vulnerability by sending a crafted SNMP poll request to the affected appliance. A successful exploit could allow the attacker to discover confidential information that should be restricted. To exploit this vulnerability, an attacker must have the configured SNMP credentials.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Cisco / Cisco Secure Email | affected 14.0.0-698; affected 13.5.1-277; affected 13.0.0-392; affected 14.2.0-620; affected 13.0.5-007; affected 13.5.4-038; affected 14.2.1-020; affected 14.3.0-032; affected 15.0.0-104; affected 15.0.1-030; affected 15.5.0-048; affected 15.5.1-055 |
| Cisco / Cisco Secure Email and Web Manager | affected 13.6.2-023; affected 13.6.2-078; affected 13.0.0-249; affected 13.0.0-277; affected 13.8.1-052; affected 13.8.1-068; affected 13.8.1-074; affected 14.0.0-404; affected 12.8.1-002; affected 14.1.0-227; affected 13.6.1-201; affected 14.2.0-203; affected 14.2.0-212; affected 12.8.1-021; affected 13.8.1-108; affected 14.2.0-224; affected 14.3.0-120; affected 15.0.0-334; affected 15.5.1-024; affected 15.5.1-029 |
| Cisco / Cisco Secure Web Appliance | affected 11.8.0-453; affected 12.5.3-002; affected 12.0.3-007; affected 12.0.3-005; affected 14.1.0-032; affected 14.1.0-047; affected 14.1.0-041; affected 12.0.4-002; affected 14.0.2-012; affected 11.8.0-414; affected 12.0.1-268; affected 11.8.1-023; affected 11.8.3-021; affected 11.8.3-018; affected 12.5.1-011; affected 11.8.4-004; affected 12.5.2-007; affected 12.5.2-011; affected 14.5.0-498; affected 12.5.4-005; affected 12.5.4-011; affected 12.0.5-011; affected 14.0.3-014; affected 12.5.5-004; affected 12.5.5-005; affected 12.5.5-008; affected 14.0.4-005; affected 14.5.1-008; affected 14.5.1-016; affected 15.0.0-355; affected 15.0.0-322; affected 12.5.6-008; affected 15.1.0-287; affected 14.5.2-011; affected 15.2.0-116; affected 14.0.5-007; affected 15.2.0-164; affected 14.5.1-510; affected 12.0.2-012; affected 12.0.2-004; affected 14.5.1-607; affected 14.5.3-033; affected 12.0.1-334; affected 14.0.1-503; affected 14.0.1-053; affected 11.8.0-429; affected 14.0.1-040; affected 14.0.1-014; affected 12.5.1-043 |
CWE
CWE-200
References
ADP enrichment
No English description supplied.
No references supplied.