Cisco Warn Customers To Patch CSE Bug

Share post:

Cisco has warned of a critical vulnerability known as CVE-2022-20798 and is asking customers to patch their systems.

The vulnerability was found in the external authentication functionality of the virtual and hardware Cisco Email Security Appliance (ESA) and Cisco Secure Email and Web Manager appliances.

The vulnerability could allow an attacker to bypass authentication and log into the web management interface of Cisco e-mail gateway appliances with non-default configurations.

The security firm reported that the vulnerability was discovered during the resolution of a Cisco TAC (Technical Assistance Center) support case and that no known public exploits or malicious exploits have been found.

Further analysis revealed that the bug only affects devices that are configured to use external authentication and LDAP as the authentication protocol. Cisco explained that the external authentication feature is disabled by default, which means that only devices with non-default configurations are impacted.

Those who cannot install CVE-2022-20798 security updates immediately should use a workaround that disables anonymous binds on the external authentication server.

The sources for this piece include an article in BleepingComputer.

Featured Tech Jobs


Related articles

Generative AI to augment, not replace, Indeed says

Generative AI, a type of artificial intelligence that can create new content, including text, code, and images, has...

Microsoft closes Windows 7/8 free upgrade loophole

Microsoft is ending its free upgrade offer from Windows 7 or 8 to Windows 10 or 11 which...

Gerwitz analyzes ChatGPT’s web browsing

David Gerwitz, a notable voice from ZDNET, has weighed in on OpenAI's decision to enhance ChatGPT for its...

Meta admits to using public Facebook posts to train AI models

Meta Platforms has admitted that it has used mountains of public Facebook posts to train its AI models. Nick...

Become a member

New, Relevant Tech Stories. Our article selection is done by industry professionals. Our writers summarize them to give you the key takeaways