CVE-2022-20798 Vulnerability in external authentication functionality of Cisco SMA/ESA could allow unauthenticated remote attacker to log in.
This vulnerability is documented in the Cisco Product Security Incident Response Team (PSIRT) blog as Cisco Secure Email and Web Manager - LDAP Authentication Bypass Vulnerability. Cisco has released software updates and/or service-level agreements (SLAs) that address this vulnerability for various Cisco products, including Cisco Secure Access Control System (ACS), Cisco Email Security Appliance (ESA), and Cisco Unified Computing System (UCS). Cisco recommends that users install these software updates and/or SLAs to prevent malicious attackers from exploiting this vulnerability. Cisco has identified the following workarounds to mitigate this vulnerability. Restrict LDAP Queries to Certain Ports Restricting LDAP queries to a certain set of ports could help mitigate this vulnerability. Cisco recommends that administrators limit the total number of LDAP queries allowed to the affected device and restrict LDAP queries to a certain set of ports. If LDAP is used, administrators should restrict LDAP queries to a certain set of ports.
Restrict Total Number of LDAP Queries to the Device
If LDAP is used, administrators should restrict LDAP queries to a certain set of ports. Cisco recommends a maximum of 10,000 LDAP queries.
References a anchor=fnl
Why Outsourcing SEO Can Be a Good Idea: One of the most popular social media platforms, Facebook, has become an increasingly important tool for many businesses. The benefits of advertising on Facebook include targeting your ideal audience and reaching them with advertisements in a more precise way than traditional methods.
Cisco Secure Access Control System (ACS)
Cisco Secure Access Control System (ACS) is a purpose-built platform that helps organizations manage and protect their virtualized environments. It delivers centralized, simplified management of access to resources across all types of devices, including desktops, laptops, thin clients, Citrix and VMware. In the event that an attacker gains access to a system running Cisco Secure ACS, they could exploit this vulnerability by sending malicious requests to the LDAP service.
Cisco Products Affected by this Vulnerability
Cisco ACS is affected by this vulnerability.
Cisco ESA is affected by this vulnerability.
Cisco UCS is affected by this vulnerability.
Timeline
Published on: 06/15/2022 18:15:00 UTC
Last modified on: 06/27/2022 17:48:00 UTC