Hacking Articles Tips Tricks Videos Tutorials

Black Hat Ethical Hacking
Cisco Secure Email bug can let attackers bypass authentication

Cisco Secure Email bug can let attackers bypass authenticationPost Views: 1
Premium Content https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/Patreon-3.png Subscribe to Patreon to watch this episode.
Reading Time: 2 Minutes
Cisco notified customers this week to patch a critical vulnerability that could allow attackers to bypass authentication and login into the web management interface of Cisco email gateway appliances with non-default configurations.
The security flaw (tracked as CVE-2022-20798) was found in the external authentication functionality of virtual and hardware Cisco Email Security Appliance (ESA) and Cisco Secure Email and Web Manager appliances.

CVE-2022-20798 is due to improper authentication checks on affected devices using Lightweight Directory Access Protocol (LDAP) for external authentication.

“An attacker could exploit this vulnerability by entering a specific input on the login page of the affected device,” Cisco explained.

“A successful exploit could allow the attacker to gain unauthorized access to the web-based management interface of the affected device.”

An advisory published on Wednesday says the bug was discovered during the resolution of a Cisco TAC (Technical Assistance Center) support case.

Cisco’s Product Security Incident Response Team (PSIRT) said it’s not aware of any publicly available exploits for this security bug or malicious use of the vulnerability in the wild.
See Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Solutions-1.png Doesn’t affect default configurationsThis bug only affects appliances configured to use external authentication and LDAP as the authentication protocol.

Luckily, according to Cisco, the external authentication feature is disabled by default, meaning only devices with non-default configurations are impacted.

To check if external auth is enabled on your appliance, log into the web-based management interface, go to System Administration > Users, and look for a green check box next to “Enable External Authentication.”
See Also: This new Linux malware is ‘almost impossible’ to detect Cisco also says this vulnerability does not affect its Cisco Secure Web Appliance product, previously known as Cisco Web Security Appliance (WSA).

Admins who cannot immediately install CVE-2022-20798 security updates can also apply a workaround that requires disabling anonymous binds on the external authentication server.

Another Secure Email gateway flaw patched in February could allow remote attackers to crash unpatched appliances using maliciously crafted email messages.
See Also: Recon Tool: Domain Analyzer Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?

If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
Today, Cisco also announced it wouldn’t fix a critical zero-day bug affecting end-of-life RV110W, RV130, RV130W, and RV215W SMB routers, allowing attackers to execute arbitrary commands with root-level privileges.
See Also: The Difference between Vulnerability Assessment and Pentesting
Source: bleepingcomputer.com Source Linkhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch-1024x1024.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/android-malware-90x90.jpg Android malware on the Google Play Store gets 2 million downloads1 day [...]

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking

Cisco Secure Email bug can let attackers bypass authentication | Black Hat Ethical Hacking

Cisco notified customers this week to patch a critical vulnerability that could allow attackers to bypass authentication and login into the web management interface of Cisco email gateway appliances with non-default configurations.

4 viewsedited 08:14

Hacking Articles Tips Tricks Videos Tutorials

Black Hat Ethical Hacking Cisco Secure Email bug can let attackers bypass authentication Cisco Secure Email bug can let attackers bypass authenticationPost Views: 1 Premium Content https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/Patreon…

6 viewsedited 08:14

Hacking Articles Tips Tricks Videos Tutorials

CSRF leads to account takeover in Yahoo!

How I managed to hack the accounts of arbitrary users of a Yahoo! application in only 30 minutes.Continue reading on Medium »
Read more...

12 views08:20

Hacking Articles Tips Tricks Videos Tutorials

https://b.thumbs.redditmedia.com/6Z40vf9sR6iSxrQUxRr8Qf40PDX-BqnKIIsNyCGdjUM.jpg submitted by /u/DrinkMoreCodeMore
[link] [comments]

11 views08:57

Hacking Articles Tips Tricks Videos Tutorials

Dark Reading: Attacks/Breaches
How Should I Think About Security When Considering Digital Transformation Projects?

Digital transformation helps businesses keep operating and to stay competitive. Here are the ways to think about security so that businesses reap the benefits without taking on associated risks.

10 views10:24

Source

Hacking Articles Tips Tricks Videos Tutorials

7 views10:52

Hacking Articles Tips Tricks Videos Tutorials

Photo

Hacking on Medium
What is XML external entity injection?

https://cdn-images-1.medium.com/max/638/0*8VPnaHAvq_zlq1xK
ในส่วนนี้ เราจะอธิบายว่า XML external entity injection คืออะไร ใช้ประโยชน์จากการ XXE injection ประเภทโจมตีต่างๆ…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Medium

What is XML external entity injection? 🤨

ในส่วนนี้ เราจะอธิบายว่า XML external entity injection คืออะไร ใช้ประโยชน์จากการ XXE injection ประเภทโจมตีต่างๆ…

7 viewsedited 10:52

About

Blog

Apps

Platform