PT-2017-12458 · Cisco · Cisco Jabber For Windows Client

Publicado 2017-10-19 · Atualizado 2019-10-09 · CVE-2017-12284

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco Jabber for Windows Client (affected versions not specified)

Description A vulnerability in the web interface could allow an authenticated, local attacker to retrieve user profile information, potentially disclosing confidential information. This issue is due to inadequate input and validation checking mechanisms. An attacker could exploit this by issuing specific commands after authentication, allowing them to view profile information that should be restricted.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2017-12284

Produtos afetados

Cisco Jabber For Windows Client

Referências · 5

• https://osv.dev/vulnerability/CVE-2017-12284 · Aviso do Fabricante
• http://securitytracker.com/id/1039624 · Nota
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171018-jab · Aviso do Fabricante
• http://securityfocus.com/bid/101501 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-12284 · Nota de Segurança