CVE-2020-3178 Cisco Content Security Management Appliance Open Redirect Vulnerabilities
Unauthenticated attackers can redirect users to malicious sites or steal browser information via improper input validation in the Cisco SMA web GUI.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2020-3178?
CVE-2020-3178 is a medium-severity vulnerability in Cisco Content Security Management Appliance (SMA), published on 6 May 2020. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Multiple vulnerabilities in the web-based GUI of Cisco AsyncOS Software for Cisco Content Security Management Appliance (SMA) could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. The vulnerabilities are due to improper input validation of the parameters of an HTTP request. An attacker could exploit these vulnerabilities by intercepting an HTTP request and modifying it to redirect a user to a specific malicious URL. A successful exploit could allow the attacker to redirect a user to a malicious web page or to obtain sensitive browser-based information. This type of attack is commonly referred to as an open redirect attack and is used in phishing attacks to get users to unknowingly visit malicious sites.
Weakness: CWE-601
Which versions are affected by CVE-2020-3178?
It affects 1 product.
Products include Cisco Content Security Management Appliance.
How do I fix CVE-2020-3178?
No fix has been published for CVE-2020-3178 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-3178 being exploited?
There is no known exploitation of CVE-2020-3178 in the wild and no public exploit code.
Other vulnerabilities in Cisco Content Security Management Appliance (SMA)
Sources
Also known as GHSA-8mc8-gh78-5fvq.