CVE-2021-40126 Cisco Umbrella Email Enumeration Vulnerability
An authenticated attacker can enumerate user email addresses via descriptive error messages in the Cisco Umbrella dashboard.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-40126?
CVE-2021-40126 is a medium-severity vulnerability in Cisco Umbrella Insights Virtual Appliance, published on 4 Nov 2021. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
A vulnerability in the web-based dashboard of Cisco Umbrella could allow an authenticated, remote attacker to perform an email enumeration attack against the Umbrella infrastructure. This vulnerability is due to an overly descriptive error message on the dashboard that appears when a user attempts to modify their email address when the new address already exists in the system. An attacker could exploit this vulnerability by attempting to modify the user's email address. A successful exploit could allow the attacker to enumerate email addresses of users in the system.
Which versions are affected by CVE-2021-40126?
It affects 1 product.
Products include Cisco Umbrella.
How do I fix CVE-2021-40126?
No fix has been published for CVE-2021-40126 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-40126 being exploited?
There is no known exploitation of CVE-2021-40126 in the wild and no public exploit code.
Other vulnerabilities in Cisco Umbrella Insights Virtual Appliance
- CVE-2018-0435 Cisco Umbrella API Unauthorized Access Vulnerability
- CVE-2019-1807 Cisco Umbrella Dashboard Session Management Vulnerability
- CVE-2021-1474 Cisco Umbrella Link and CSV Formula Injection Vulnerabilities
- CVE-2021-1475 Cisco Umbrella Link and CSV Formula Injection Vulnerabilities
- CVE-2019-1792 Cisco Umbrella Cross-Site Scripting Vulnerability
Sources
Also known as GHSA-qh32-c3pp-x33g.