CVE-2025-22918: Infoleak
Polycom RealPresence Group 500 <=20 has Insecure Permissions due to automatically loaded cookies. This allows for the use of administrator functions, resulting in the leakage of sensitive user information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-22918?
CVE-2025-22918 is considered a high severity vulnerability due to the potential leakage of sensitive user information.
How do I fix CVE-2025-22918?
To fix CVE-2025-22918, ensure that the Polycom RealPresence Group 500 is updated to a version newer than 20 and review permissions on loaded cookies.
What systems are affected by CVE-2025-22918?
CVE-2025-22918 affects Polycom RealPresence Group 500 devices with version 20 or earlier.
What are the consequences of CVE-2025-22918?
The consequences of CVE-2025-22918 include unauthorized access to administrator functions and potential exposure of sensitive user data.
Is there a workaround for CVE-2025-22918?
A potential workaround for CVE-2025-22918 includes restricting access to devices until the security update can be applied.