CVE-2020-3441

cisco webex meetings, cisco webex meetings server

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2020-3441

Katalog CVE

CVSS 5.3 · Medium EPSS 1,6%

Kerentanan Improper Input Validation pada cisco webex meetings, cisco webex meetings server. Skor CVSS 3.1 5.3 (Medium) menurut NVD.

Deskripsi (NVD)

A vulnerability in Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to view sensitive information from the meeting room lobby. This vulnerability is due to insufficient protection of sensitive participant information. An attacker could exploit this vulnerability by browsing the Webex roster. A successful exploit could allow the attacker to gather information about other Webex participants, such as email address and IP address, while waiting in the lobby.

Rincian

Terbit di NVD
18 November 2020
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
5.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-20: Improper Input Validation
EPSS (30 hari)
1,6% peluang dieksploitasi; lebih tinggi dari 74,6% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
cisco webex meetings Semua versi hingga 40.6.11
cisco webex meetings Semua versi hingga 40.11.3
cisco webex meetings server Semua versi sebelum 3.0
cisco webex meetings server Versi 3.0 maintenance_release2
cisco webex meetings server Versi 3.0 maintenance_release3
cisco webex meetings server Versi 4.0
cisco webex meetings server Versi 4.0 maintenance_release1
cisco webex meetings server Versi 4.0 maintenance_release2

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.