CVE-2020-3402CWE-306

Cisco Unified Customer Voice Portal Information Disclosure Vulnerability

Medium · published July 2, 2020

CVSS v3.0
5.3
EPSS
2%
Percentile
75.3
In the wild
Unconfirmed
What it is

A vulnerability in the Java Remote Method Invocation (RMI) interface of Cisco Unified Customer Voice Portal (CVP) could allow an unauthenticated, remote attacker to access sensitive information on an affected device. The vulnerability exists because certain RMI listeners are not properly authenticated. An attacker could exploit this vulnerability by sending a crafted request to the affected listener. A successful exploit could allow the attacker to access sensitive information on an affected device.

The record
Technical detail
CVSS v3.0
5.3 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01577 · 75.3th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2020-07-02T04:20Z
EPSS history
Timeline
  • 02 JUL 04:20Z
    Cisco Unified Customer Voice Portal Information Disclosure Vulnerability
    cvelistv5