PT-2018-11278 · Polycom · Polycom Realpresence Web Suite

Publicado 2018-06-20 · Atualizado 2018-08-23 · CVE-2018-12592

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Polycom RealPresence Web Suite versions prior to 2.2.0

Description The issue allows a meeting invitee's video to be visible to other participants for a few seconds after joining a meeting, even if the invitee has chosen to turn off their video. This occurs because the software does not immediately block the user's video upon joining the meeting.

Recommendations For versions prior to 2.2.0, update to version 2.2.0 or later to resolve the issue. As a temporary workaround, consider informing users to wait a few seconds before interacting with the meeting to ensure their video is not unintentionally shared. Restrict access to meetings to minimize the risk of unintended video sharing until the update is applied.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2018-12592

Produtos afetados

Polycom Realpresence Web Suite

Referências · 4

• https://osv.dev/vulnerability/CVE-2018-12592 · Aviso do Fabricante
• https://support.polycom.com/content/dam/polycom-support/global/documentation/security-advisory-vulnerability-on-polycom-realpresence-web-suite-v-1-0.pdf · Aviso do Fabricante
• http://securityfocus.com/bid/104524 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-12592 · Nota de Segurança