CVE-2021-1516

🗓️ 06 May 2021 12:51:08Reported by ciscoType

Vulnerability in Cisco AsyncOS Software for Content Security Management Appliance, Email Security Appliance, and Web Security Appliance allows authenticated remote attacker to access sensitive information via HTTP requests. Exploitation could lead to password exposure

Reporter	Title	Published	Views	Family All 13
Cisco	Cisco Content Security Management Appliance, Email Security Appliance, and Web Security Appliance Information Disclosure Vulnerability	5 May 202116:00	–	cisco
Tenable Nessus	Cisco Email Security Appliance Information Disclosure (cisco-sa-esa-wsa-sma-info-gY2AEz2H)	21 May 202100:00	–	nessus
Tenable Nessus	Cisco Content Security Management Appliance Information Disclosure (cisco-sa-esa-wsa-sma-info-gY2AEz2H)	21 May 202100:00	–	nessus
Tenable Nessus	Cisco Web Security Appliance Information Disclosure (cisco-sa-esa-wsa-sma-info-gY2AEz2H)	21 May 202100:00	–	nessus
CNNVD	Cisco Content Security Management Appliance 安全漏洞	5 May 202100:00	–	cnnvd
CNVD	Cisco Content Security Management Appliance Information Disclosure Vulnerability (CNVD-2021-35616)	7 May 202100:00	–	cnvd
Cvelist	CVE-2021-1516 Cisco Content Security Management Appliance, Email Security Appliance, and Web Security Appliance Information Disclosure Vulnerability	6 May 202112:51	–	cvelist
EUVD	EUVD-2021-6983	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Cisco Content Security Management Appliance	6 May 202100:00	–	ncsc
NVD	CVE-2021-1516	6 May 202113:15	–	nvd

NVD

Node

cisco content_security_management_applianceMatch-

cisco email_security_applianceMatch-

cisco web_security_applianceMatch-

AND

cisco asyncosRange<14.0

Node

cisco ironport_web_security_applianceMatch13.6.2-023

cisco ironport_web_security_applianceMatch14.0.0-090

cisco ironport_web_security_applianceMatch14.0.0-133

cisco ironport_web_security_applianceMatch14.0.0-292

cisco ironport_web_security_applianceMatch14.0.0-300

[
  {
    "product": "Cisco Web Security Appliance (WSA)",
    "vendor": "Cisco",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-wsa-sma-info-gY2AEz2H

21 Nov 2024 05:44Current

5.2Medium risk

Vulners AI Score5.2

CVSS 24

CVSS 3.14.3 - 6.5

EPSS0.00311

SSVC

CWE-540