PT-2018-11278 · Polycom · Polycom Realpresence Web Suite

Published 2018-06-20 · Updated 2018-08-23 · CVE-2018-12592

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Polycom RealPresence Web Suite versions prior to 2.2.0

Description The issue allows a meeting invitee's video to be visible to other participants for a few seconds after joining a meeting, even if the invitee has chosen to turn off their video. This occurs because the software does not immediately block the user's video upon joining the meeting.

Recommendations For versions prior to 2.2.0, update to version 2.2.0 or later to resolve the issue. As a temporary workaround, consider informing users to wait a few seconds before interacting with the meeting to ensure their video is not unintentionally shared. Restrict access to meetings to minimize the risk of unintended video sharing until the update is applied.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2018-12592

Affected Products

Polycom Realpresence Web Suite

References · 4

• https://osv.dev/vulnerability/CVE-2018-12592 · Vendor Advisory
• https://support.polycom.com/content/dam/polycom-support/global/documentation/security-advisory-vulnerability-on-polycom-realpresence-web-suite-v-1-0.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-12592 · Security Note
• http://securityfocus.com/bid/104524 · Note