CVE-2021-1561

CVE-2021-1561 is a medium-severity vulnerability in the spam quarantine feature of Cisco Secure Email and Web Manager (formerly Cisco Security Management Appliance). It allows an authenticated, remote attacker to modify another user's spam quarantine settings due to improper access restrictions. A successful exploit could lead to disabled security controls or unauthorized viewing of quarantined emails. The vulnerability has a CVSS score of 5.4 (MEDIUM) and is rated as low complexity with no user interaction required. While there is no known active exploitation, public exploit code, or Metasploit module, the vulnerability has received some community discussion and media coverage. It is not listed in CISA's Known Exploited Vulnerabilities Catalog.