Critical Flaw in Cisco Secure Email and Web Manager Lets Attackers Bypass Authentication

Web: https://thehackernews.com/2022/06/critical-flaw-in-cisco-secure-email-and.html

Cisco on Wednesday rolled out fixes to address a critical security flaw affecting Email Security Appliance (ESA) and Secure Email and Web Manager that could be exploited by an unauthenticated, remote attacker to sidestep authentication.
Assigned the CVE identifier CVE-2022-20798, the bypass vulnerability is rated 9.8 out of a maximum of 10 on the CVSS scoring system and stems from improper

attackers authentication bypass cisco cisco secure critical email flaw manager secure web