PT-2020-16638 · Cisco · Cisco Jabber For Windows+2

Olav Sortland Thoresen · Published 2020-12-11 · Updated 2020-12-12 · CVE-2020-27132

Positive Technologies (AI Summary)

CVSS v3.1

9.9

Critical

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cisco Jabber for Windows (affected versions not specified) Cisco Jabber for MacOS (affected versions not specified) Cisco Jabber for mobile platforms (affected versions not specified)

Description Multiple vulnerabilities in Cisco Jabber could allow an attacker to execute arbitrary programs on the underlying operating system with elevated privileges or gain access to sensitive information.

Recommendations For Cisco Jabber for Windows, update to a version that addresses these vulnerabilities. For Cisco Jabber for MacOS, update to a version that addresses these vulnerabilities. For Cisco Jabber for mobile platforms, update to a version that addresses these vulnerabilities. As a temporary workaround, consider restricting access to sensitive information and limiting privileges to minimize the risk of exploitation.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

CWE-201

Related Identifiers

CVE-2020-27132

Affected Products

Cisco Jabber For Macos

Cisco Jabber For Windows

Cisco Jabber For Mobile Platforms

References · 10

• https://osv.dev/vulnerability/CVE-2020-27132 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-27132 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-jabber-ZktzjpgO · Vendor Advisory
• https://t.me/cibsecurity/20396 · Telegram Post
• https://t.me/cibsecurity/20377 · Telegram Post
• https://t.me/cibsecurity/20434 · Telegram Post
• https://t.me/cibsecurity/20414 · Telegram Post
• https://t.me/cvenotify/7037 · Telegram Post
• https://t.me/cibsecurity/20357 · Telegram Post
• https://t.me/cibsecurity/20454 · Telegram Post