CVE-2018-12592: Infoleak
Polycom RealPresence Web Suite before 2.2.0 does not block a user's video for a few seconds upon joining a meeting (when the user has explicitly chosen to turn off the video using a specific option). During those seconds, a meeting invitee may unknowingly be on camera with other participants able to view.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-12592?
CVE-2018-12592 has a high severity as it could lead to unintentional exposure of a user's video to other meeting participants.
How do I fix CVE-2018-12592?
To fix CVE-2018-12592, upgrade Polycom RealPresence Web Suite to version 2.2.0 or higher.
What versions of Polycom RealPresence Web Suite are affected by CVE-2018-12592?
CVE-2018-12592 affects all versions of Polycom RealPresence Web Suite prior to 2.2.0.
What happens if I do not address CVE-2018-12592?
If CVE-2018-12592 is not addressed, users may inadvertently appear on camera during meetings, compromising their privacy.
Is there a workaround for CVE-2018-12592 while I update?
Currently, there is no official workaround available for CVE-2018-12592, so immediate upgrading is recommended.