CVE-2020-3122

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2020-3122", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "state": "PUBLISHED", "assignerShortName": "cisco", "dateReserved": "2019-12-12T00:00:00.000Z", "datePublished": "2025-03-04T18:22:12.411Z", "dateUpdated": "2025-03-04T18:27:11.025Z"}, "containers": {"cna": {"title": "Cisco Content Security Management Appliance Information Disclosure Vulnerability", "descriptions": [{"lang": "en", "value": "A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Content Security Management Appliance (SMA) could allow an unauthenticated, remote attacker to obtain sensitive network information."}], "references": [{"url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvr92383", "name": "CSCvr92383"}], "exploits": [{"lang": "en", "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that is described in this advisory."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "Improper Access Control", "type": "cwe", "cweId": "CWE-284"}]}], "source": {"advisory": "", "discovery": "EXTERNAL", "defects": ["CSCvr92383"]}, "metrics": [{"format": "cvssV3_0", "cvssV3_0": {"version": "3.0", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "HIGH"}}], "affected": [{"vendor": "Cisco", "product": "Cisco IronPort Security Management Appliance", "versions": [{"version": "N/A", "status": "affected"}]}, {"vendor": "Cisco", "product": "Cisco Secure Email and Web Manager", "versions": [{"version": "11.0.0(Ritz)-128", "status": "affected"}]}], "providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2025-03-04T18:22:12.411Z"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-03-04T18:26:53.334394Z", "id": "CVE-2020-3122", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-03-04T18:27:11.025Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2020-3122", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-03-04T18:26:53.334394Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-03-04T18:27:06.360Z"}}], "cna": {"title": "Cisco Content Security Management Appliance Information Disclosure Vulnerability", "source": {"defects": ["CSCvr92383"], "advisory": "", "discovery": "EXTERNAL"}, "metrics": [{"format": "cvssV3_0", "cvssV3_0": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}], "affected": [{"vendor": "Cisco", "product": "Cisco IronPort Security Management Appliance", "versions": [{"status": "affected", "version": "N/A"}]}, {"vendor": "Cisco", "product": "Cisco Secure Email and Web Manager", "versions": [{"status": "affected", "version": "11.0.0(Ritz)-128"}]}], "exploits": [{"lang": "en", "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that is described in this advisory."}], "references": [{"url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvr92383", "name": "CSCvr92383"}], "descriptions": [{"lang": "en", "value": "A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Content Security Management Appliance (SMA) could allow an unauthenticated, remote attacker to obtain sensitive network information."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "cwe", "cweId": "CWE-284", "description": "Improper Access Control"}]}], "providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2025-03-04T18:22:12.411Z"}}}, "cveMetadata": {"cveId": "CVE-2020-3122", "state": "PUBLISHED", "dateUpdated": "2025-03-04T18:27:11.025Z", "dateReserved": "2019-12-12T00:00:00.000Z", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "datePublished": "2025-03-04T18:22:12.411Z", "assignerShortName": "cisco"}, "dataVersion": "5.1"}

{"affected": [{"affectedData": [{"product": "Cisco IronPort Security Management Appliance", "vendor": "Cisco", "versions": [{"status": "affected", "version": "N/A"}]}, {"product": "Cisco Secure Email and Web Manager", "vendor": "Cisco", "versions": [{"status": "affected", "version": "11.0.0(Ritz)-128"}]}], "source": "psirt@cisco.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:asyncos:11.0.0-128:*:*:*:*:*:*:*", "matchCriteriaId": "BADF6D45-FDBE-42A7-A915-0DDD8FBC64F9", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:secure_email_and_web_manager_m170:-:*:*:*:*:*:*:*", "matchCriteriaId": "3057023B-AD68-4953-A780-75EA416A7B94", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:secure_email_and_web_manager_m190:-:*:*:*:*:*:*:*", "matchCriteriaId": "B87164B6-4717-4968-86F7-C62EB677FC50", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:secure_email_and_web_manager_m195:-:*:*:*:*:*:*:*", "matchCriteriaId": "10BD81D0-D81A-4361-B4E8-D674732A2A33", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:secure_email_and_web_manager_m380:-:*:*:*:*:*:*:*", "matchCriteriaId": "D28903F8-3C4D-4337-9721-CEC108A7E2D5", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:secure_email_and_web_manager_m390:-:*:*:*:*:*:*:*", "matchCriteriaId": "84ACD394-2E45-4E8E-A342-AC57935C7038", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:secure_email_and_web_manager_m390x:-:*:*:*:*:*:*:*", "matchCriteriaId": "6112D56B-B68B-40B0-8EB9-3315533110C7", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:secure_email_and_web_manager_m395:-:*:*:*:*:*:*:*", "matchCriteriaId": "8A1198BC-C934-4C26-887D-D599E8128FD3", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:secure_email_and_web_manager_m680:-:*:*:*:*:*:*:*", "matchCriteriaId": "10374BA0-E7DD-4930-8C58-251F98B75A11", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:secure_email_and_web_manager_m690:-:*:*:*:*:*:*:*", "matchCriteriaId": "CD265B49-C691-44B3-A505-DC704E80313C", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:secure_email_and_web_manager_m690x:-:*:*:*:*:*:*:*", "matchCriteriaId": "E37CFC3A-1752-4C66-BD32-CFFA46C3E6AD", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:secure_email_and_web_manager_m695:-:*:*:*:*:*:*:*", "matchCriteriaId": "830693AC-A737-43B9-BBB4-E3A1C950C47F", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Content Security Management Appliance (SMA) could allow an unauthenticated, remote attacker to obtain sensitive network information."}, {"lang": "es", "value": "Una vulnerabilidad en la interfaz de administraci\u00f3n basada en web de Cisco AsyncOS para Cisco Content Security Management Appliance (SMA) podr\u00eda permitir que un atacante remoto no autenticado obtenga informaci\u00f3n confidencial de la red."}], "id": "CVE-2020-3122", "lastModified": "2026-06-17T03:17:23.780", "metrics": {"cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.0"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "psirt@cisco.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2020-3122", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2025-03-04T18:26:53.334394Z", "version": "2.0.3"}}]}, "published": "2025-03-04T19:15:36.890", "references": [{"source": "psirt@cisco.com", "tags": ["Vendor Advisory"], "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvr92383"}], "sourceIdentifier": "psirt@cisco.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-284"}], "source": "psirt@cisco.com", "type": "Secondary"}]}

{}

{"created": "2025-07-13T11:06:19.908519+00:00", "updated": "2025-07-13T11:06:19.908590+00:00", "vendors": ["cisco", "cisco$PRODUCT$secure_email_and_web_manager"]}