CVE-2020-3347 — Sensitive Information Exposure in Cisco Webex Meetings

CWE-200 — Sensitive Information Exposure4 documents4 sources
Severity
5.5MEDIUMNVD
EPSS
0.1%
top 78.29%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Cisco Webex MeetingsCisco Webex Meetings Server
Timeline
PublishedJun 18
Latest updateMay 24

Description

A vulnerability in Cisco Webex Meetings Desktop App for Windows could allow an authenticated, local attacker to gain access to sensitive information on an affected system. The vulnerability is due to unsafe usage of shared memory that is used by the affected software. An attacker with permissions to view system memory could exploit this vulnerability by running an application on the local system that is designed to read shared memory. A successful exploit could allow the attacker to retrieve sen…

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

▶NVDcisco/webex_meetings< 40.4.12+1

🔴Vulnerability Details

2
GHSA
GHSA-pj73-w92m-2gfq: A vulnerability in Cisco Webex Meetings Desktop App for Windows could allow an authenticated, local attacker to gain access to sensitive information o↗2022-05-24
▶
CVEList
Cisco Webex Meetings Desktop App for Windows Shared Memory Information Disclosure Vulnerability↗2020-06-18
▶

📋Vendor Advisories

1
Cisco
Cisco Webex Meetings Desktop App for Windows Shared Memory Information Disclosure Vulnerability↗2020-06-17
▶
CVE-2020-3347 — Sensitive Information Exposure in Cisco | cvebase