PT-2024-9007 · Cisco · Cisco Meeting Management

Published 2024-11-06 · Updated 2025-07-23 · CVE-2024-20507

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Cisco Meeting Management (affected versions not specified)

Description: A vulnerability in the logging subsystem of Cisco Meeting Management could allow an authenticated, remote attacker to view sensitive information in clear text on an affected system. This issue is due to improper storage of sensitive information within the web-based management interface of an affected device. An attacker could exploit this vulnerability by logging in to the web-based management interface, potentially allowing them to view sensitive data stored on the affected device.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2024-10689

CVE-2024-20507

Affected Products

Cisco Meeting Management

References · 8

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cmm-info-disc-9ZEMAhGA · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-20507 · Security Note
• https://osv.dev/vulnerability/CVE-2024-20507 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-10689 · Security Note
• https://t.me/cveNotify/130002 · Telegram Post
• https://t.me/cvedetector/10030 · Telegram Post
• https://twitter.com/CVEnew/status/1854203370380169683 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1854324611741024726 · Twitter Post