CVE-2021-1561 (CNNVD-202108-1633)
中文标题:
Cisco Secure Email 授权问题漏洞
英文标题:
Cisco Secure Email and Web Manager Spam Quarantine Unauthorized Access Vulnerability
漏洞描述
中文描述:
Cisco Secure Email是美国思科（Cisco）公司的思科安全电子邮件（前身为电子邮件安全）为您的电子邮件提供最佳保护，使其免受网络威胁。 Cisco Secure Email 和 Web Manager存在授权问题漏洞，攻击者可利用该漏洞可以通过向受影响的系统发送恶意请求来达到攻击的目的。
英文描述:
A vulnerability in the spam quarantine feature of Cisco Secure Email and Web Manager, formerly Cisco Security Management Appliance (SMA), could allow an authenticated, remote attacker to gain unauthorized access and modify the spam quarantine settings of another user. This vulnerability exists because access to the spam quarantine feature is not properly restricted. An attacker could exploit this vulnerability by sending malicious requests to an affected system. A successful exploit could allow the attacker to modify another user's spam quarantine settings, possibly disabling security controls or viewing email messages stored on the spam quarantine interfaces.
CWE类型:
标签:
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| Cisco | Cisco Content Security Management Appliance (SMA) | n/a | - | - |
cpe:2.3:a:cisco:cisco_content_security_management_appliance_(sma):n_a:*:*:*:*:*:*:*
|
| cisco | secure_email_and_web_manager | * | - | - |
cpe:2.3:o:cisco:secure_email_and_web_manager:*:*:*:*:*:*:*:*
|
解决方案
中文解决方案:
英文解决方案:
临时解决方案:
参考链接
cve.org
CVSS评分详情
3.1 (cna)
MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
时间信息
利用信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2021-1561 |
2025-11-11 15:20:45 | 2025-11-11 07:36:33 |
| NVD | nvd_CVE-2021-1561 |
2025-11-11 14:57:41 | 2025-11-11 07:44:55 |
| CNNVD | cnnvd_CNNVD-202108-1633 |
2025-11-11 15:10:42 | 2025-11-11 07:56:51 |
版本与语言
安全公告
变更历史
查看详细变更
- vulnerability_type: 未提取 -> 授权问题
- cnnvd_id: 未提取 -> CNNVD-202108-1633
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
查看详细变更
- affected_products_count: 1 -> 2
- data_sources: ['cve'] -> ['cve', 'nvd']