Rewterz Threat Alert – Patchwork APT activity around South Asia
July 16, 2020Rewterz Threat Alert – Agent Tesla Malware – IOCs
July 17, 2020Rewterz Threat Alert – Patchwork APT activity around South Asia
July 16, 2020Rewterz Threat Alert – Agent Tesla Malware – IOCs
July 17, 2020Severity
Medium
Analysis Summary
A vulnerability in URL filtering of Cisco Content Security Management Appliance (SMA) could allow an unauthenticated, remote attacker to bypass URL filtering on an affected device.
The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted, malicious HTTP request to an affected device. A successful exploit could allow the attacker to redirect users to malicious sites.
Impact
Bypass URL filtering
Affected Vendors
Cisco
Affected Products
Cisco SMA software
Remediation
Refer to Cisco advisory for the complete list of affected products and it’s respective patches.
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ESA-filt-39jXvMfM