CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 5.5
CWE Name:  Permissions Privileges and Access Controls
Summary: cisco content security management appliance (sma) 8.3.6-039, 9.1.0-31, and 9.1.0-103 improperly restricts the privileges available after ldap authentication, which allows remote authenticated users to read or write to an arbitrary user's spam quarantine folder by visiting a spam-notification url, aka bug id cscuv65894.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/NONE
Published Date: 2015-08-19
Last Modified Date: 2017-09-20