CVE-2020-3441

CWE-20 — Improper Input Validation4 documents4 sources
Severity
5.3MEDIUM
EPSS
0.9%
top 24.91%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Cisco Webex Meetings ServerCisco Webex MeetingsCisco Cisco Webex Meetings Server
Timeline
PublishedNov 18
Latest updateMay 24

Description

A vulnerability in Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to view sensitive information from the meeting room lobby. This vulnerability is due to insufficient protection of sensitive participant information. An attacker could exploit this vulnerability by browsing the Webex roster. A successful exploit could allow the attacker to gather information about other Webex participants, such as email address and IP address, while waiting in …

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 3.9 | Impact: 1.4

Affected Packages3 packages

▶NVDcisco/webex_meetings40.6.11+1

🔴Vulnerability Details

2
GHSA
GHSA-3j43-3g85-j77v: A vulnerability in Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to view sensitive information↗2022-05-24
▶
CVEList
Cisco Webex Meetings and Cisco Webex Meetings Server Information Disclosure Vulnerability↗2020-11-18
▶

📋Vendor Advisories

1
Cisco
Cisco Webex Meetings and Cisco Webex Meetings Server Information Disclosure Vulnerability↗2020-11-18
▶
CVE-2020-3441 (MEDIUM CVSS 5.3) | A vulnerability in Cisco Webex Meet | cvebase.io