PT-2020-4981 · Open Webrtc · Open Webrtc Toolkit

Published 2020-11-10 · Updated 2020-11-23 · CVE-2020-12338

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Open WebRTC Toolkit versions prior to 4.3.1

Description The issue is related to insufficient control flow management in the Open WebRTC Toolkit. This could potentially allow an unauthenticated user to escalate privileges via network access.

Recommendations For versions prior to 4.3.1, update to version 4.3.1 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-670

Related Identifiers

BDU:2020-05560

CVE-2020-12338

Affected Products

Open Webrtc Toolkit

References · 7

• https://osv.dev/vulnerability/CVE-2020-12338 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-05560 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-12338 · Security Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00424 · Vendor Advisory
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00424.html · Note
• https://t.me/cibsecurity/16320 · Telegram Post
• https://vuldb.com/?id.164933 · Note