PT-2017-12458 · Cisco · Cisco Jabber For Windows Client

Published 2017-10-19 · Updated 2019-10-09 · CVE-2017-12284

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco Jabber for Windows Client (affected versions not specified)

Description A vulnerability in the web interface could allow an authenticated, local attacker to retrieve user profile information, potentially disclosing confidential information. This issue is due to inadequate input and validation checking mechanisms. An attacker could exploit this by issuing specific commands after authentication, allowing them to view profile information that should be restricted.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2017-12284

Affected Products

Cisco Jabber For Windows Client

References · 5

• https://osv.dev/vulnerability/CVE-2017-12284 · Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171018-jab · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-12284 · Security Note
• http://securitytracker.com/id/1039624 · Note
• http://securityfocus.com/bid/101501 · Note