CVE-2020-3122 MEDIUM

CVE-2020-3122: Cisco Content Security Management Appliance Information Disclosure Vulnerability

Vendor Cisco
Product Cisco IronPort Security Management Appliance
Weakness CWE-284
Published March 4, 2025
Last update March 4, 2025

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Content Security Management Appliance (SMA) could allow an unauthenticated, remote attacker to obtain sensitive network information.

Key dates

02Disclosure timeline

March 4, 2025 CVE published
March 4, 2025 Record updated