PT-2022-5100 · Cisco · Cisco Jabber

Ivan Fratric · Published 2022-10-05 · Updated 2024-01-25 · CVE-2022-20917

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Cisco Jabber (affected versions not specified)

Description A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) message processing feature could allow an authenticated, remote attacker to manipulate the content of XMPP messages. This is due to the improper handling of nested XMPP messages within requests sent to the Cisco Jabber client software. An attacker could exploit this by connecting to an XMPP messaging server and sending crafted XMPP messages to an affected Jabber client, potentially allowing the attacker to cause the Jabber client application to perform unsafe actions. The vulnerability may also allow an attacker to send a hidden HTTP request, such as an "HTTP Request Smuggling" attack, using specially crafted XMPP messages.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exposure of Resource to Wrong Sphere

Weakness Enumeration

CWE-668

Related Identifiers

BDU:2022-06330

CVE-2022-20917

Affected Products

Cisco Jabber

References · 7

• https://bdu.fstec.ru/vul/2022-06330 · Security Note
• https://osv.dev/vulnerability/CVE-2022-20917 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-20917 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-jabber-xmpp-Ne9SCM · Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-jabber-xmpp-Ne9SCM · Note
• https://twitter.com/CVEnew/status/1702512364963471567 · Twitter Post
• https://t.me/cvenotify/58311 · Telegram Post