CVE-2020-3441CWE-20

Cisco Webex Meetings and Cisco Webex Meetings Server Information Disclosure Vulnerability

Medium · published November 18, 2020

CVSS v3.1
5.3
EPSS
2%
Percentile
75.1
In the wild
Unconfirmed
What it is

A vulnerability in Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to view sensitive information from the meeting room lobby. This vulnerability is due to insufficient protection of sensitive participant information. An attacker could exploit this vulnerability by browsing the Webex roster. A successful exploit could allow the attacker to gather information about other Webex participants, such as email address and IP address, while waiting in the lobby.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01565 · 75.1th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2020-11-18T17:41Z
EPSS history
Timeline
  • 18 NOV 17:41Z
    Cisco Webex Meetings and Cisco Webex Meetings Server Information Disclosure Vulnerability
    cvelistv5