{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-04-28T04:55:15.092","vulnerabilities":[{"cve":{"id":"CVE-2022-20868","sourceIdentifier":"psirt@cisco.com","published":"2022-11-04T18:15:10.983","lastModified":"2024-11-21T06:43:43.140","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability in the web-based management interface of Cisco Email Security Appliance, Cisco Secure Email and Web Manager and Cisco Secure Web Appliance could allow an authenticated, remote attacker to elevate privileges on an affected system. The attacker needs valid credentials to exploit this vulnerability. \r\n\r\nThis vulnerability is due to the use of a hardcoded value to encrypt a token used for certain APIs calls . An attacker could exploit this vulnerability by authenticating to the device and sending a crafted HTTP request. A successful exploit could allow the attacker to impersonate another valid user and execute commands with the privileges of that user account.\r\n"},{"lang":"es","value":"Una vulnerabilidad en la interfaz de administración basada en web de Cisco Email Security Appliance, Cisco Secure Email and Web Manager y Cisco Secure Web Appliance podría permitir que un atacante remoto autenticado eleve los privilegios en un sistema afectado. El atacante necesita credenciales válidas para aprovechar esta vulnerabilidad. Esta vulnerabilidad se debe al uso de un valor codificado a mano para cifrar un token utilizado para ciertas llamadas API. Un atacante podría aprovechar esta vulnerabilidad autenticándose en el dispositivo y enviando una solicitud HTTP manipulada. Un exploit exitoso podría permitir al atacante hacerse pasar por otro usuario válido y ejecutar comandos con los privilegios de esa cuenta de usuario."}],"metrics":{"cvssMetricV31":[{"source":"psirt@cisco.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":1.2,"impactScore":3.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}]},"weaknesses":[{"source":"psirt@cisco.com","type":"Secondary","description":[{"lang":"en","value":"CWE-321"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-798"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:asyncos:*:*:*:*:*:*:*:*","versionStartIncluding":"13.0","versionEndExcluding":"14.2.1","matchCriteriaId":"6A74DE82-C879-48E3-8E74-F03D18B8ECF4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:secure_email_gateway:-:*:*:*:*:*:*:*","matchCriteriaId":"AEFF3E86-0ED8-40CA-BD69-9FD67F32A31A"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:asyncos:*:*:*:*:*:*:*:*","versionStartIncluding":"12.0","versionEndExcluding":"14.2.0","matchCriteriaId":"EACCC821-A995-43A9-9BA2-8A335A55FC99"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:secure_email_and_web_manager:-:*:*:*:*:*:*:*","matchCriteriaId":"DB4207E0-A5C1-4945-B996-722933148C37"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:asyncos:*:*:*:*:*:*:*:*","versionStartIncluding":"11.8","versionEndExcluding":"12.5.5","matchCriteriaId":"68AEA203-411D-40C8-AA2A-A0FB4D2789DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:asyncos:*:*:*:*:*:*:*:*","versionStartIncluding":"14.0","versionEndExcluding":"14.0.4","matchCriteriaId":"AE2447D4-9F35-4D76-BF77-F4E63DB57DA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:asyncos:14.5:*:*:*:*:*:*:*","matchCriteriaId":"2FFF4B58-3DAF-47D7-8569-5D3D27F14D22"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:secure_web_appliance:-:*:*:*:*:*:*:*","matchCriteriaId":"67074526-9933-46B3-9FE3-A0BE73C5E8A7"}]}]}],"references":[{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esasmawsa-vulns-YRuSW5mD","source":"psirt@cisco.com"},{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esasmawsa-vulns-YRuSW5mD","source":"af854a3a-2127-422b-91ae-364da2661108"}]}}]}