Privilege Escalation via Group Name Similarity in Cisco AsyncOS on Email Security Appliance and Content Security Management Appliance

Privilege Escalation via Group Name Similarity in Cisco AsyncOS on Email Security Appliance and Content Security Management Appliance

CVE-2014-2195 · MEDIUM Severity

AV:N/AC:M/AU:N/C:P/I:N/A:N

Cisco AsyncOS on Email Security Appliance (ESA) and Content Security Management Appliance (SMA) devices, when Active Directory is enabled, does not properly handle group names, which allows remote attackers to gain role privileges by leveraging group-name similarity, aka Bug ID CSCum86085.

Learn more about our Web Application Penetration Testing UK.