← voltar
CVE-2020-3498

Cisco Jabber for Windows Information Disclosure Vulnerability

CVSS 6.5 MEDIUMEPSS 1.9%CWE-200
Vexday Risk Score
13Baixo
Decisão SSVC (CISA)
Track
Sem sinal de exploração → monitorar
CVSS 6.5EPSS 1.9%KEV nãoPoC Nuclei Metasploit Patch referenciado
Ciclo de vida
04 set 2020Publicada no NVD
Recomendação: Monitorar — sem sinal de exploração no momento.
A vulnerability in Cisco Jabber software could allow an authenticated, remote attacker to gain access to sensitive information. The vulnerability is due to improper validation of message contents. An attacker could exploit this vulnerability by sending specially crafted messages to a targeted system. A successful exploit could allow the attacker to cause the application to return sensitive authentication information to another system, possibly for use in further attacks.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
Cisco · Cisco Jabber

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →