Cisco Email Security Appliance CVE-2015-4184 Remote Security Bypass Vulnerability

Bugtraq ID:	75181
Class:	Design Error
CVE:	CVE-2015-4184
Remote:	Yes
Local:	No
Published:	Jun 12 2015 12:00AM
Updated:	Dec 08 2015 10:05PM
Credit:	Cisco
Vulnerable:	Cisco Email Security Appliance 8.5.6-074 Cisco Email Security Appliance 7.6.1-gpl-022 Cisco Email Security Appliance 3.3.1-09 Cisco Asyncos 8.0.2 Cisco Asyncos 8.0.1 Cisco Asyncos 9.6 Cisco Asyncos 9.5 Cisco Asyncos 9.1 Cisco Asyncos 9.0 Cisco Asyncos 8.5 Cisco Asyncos 8.0 Cisco AsyncOS 7.5 Cisco AsyncOS 7.1.5-026 Cisco AsyncOS 7.1.3-010
Not Vulnerable:	Cisco Asyncos 9.6.0-042 Cisco Asyncos 9.5.0-201 Cisco Asyncos 9.1.1-023 Cisco Asyncos 9.1.0-032 Cisco Asyncos 8.5.7-043 Cisco Asyncos 8.0.2-055 Cisco Asyncos 7.6.3-027

Cisco Email Security Appliance CVE-2015-4184 Remote Security Bypass Vulnerability

Cisco Email Security Appliance (ESA) is prone to a remote security-bypass vulnerability.

Successfully exploiting this issue may allow an attacker to bypass certain security restrictions and perform unauthorized actions.

This issue is being tracked by Cisco Bug ID's CSCuu35853 and CSCuu37733.

Cisco Email Security Appliance CVE-2015-4184 Remote Security Bypass Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].