cisco-sa-tele-info-DrEGLpDQ: Cisco TelePresence Collaboration Endpoint Software Information Disclosure Vulnerability
First published: Wed Nov 04 2020(Updated: )
A vulnerability in the video endpoint API (xAPI) of Cisco TelePresence Collaboration Endpoint (CE) Software could allow an authenticated, remote attacker to gain access to sensitive information on an affected device. The vulnerability is due to improper storage of sensitive information on an affected device. An attacker could exploit this vulnerability by accessing information that should not be accessible to users with low privileges. A successful exploit could allow the attacker to gain access to sensitive information. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-tele-info-DrEGLpDQ
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco TelePresence Collaboration Endpoint Software |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-tele-info-DrEGLpDQ?
The severity of cisco-sa-tele-info-DrEGLpDQ is classified as high due to the potential for unauthorized access to sensitive information.
How do I fix cisco-sa-tele-info-DrEGLpDQ?
To fix cisco-sa-tele-info-DrEGLpDQ, update your Cisco TelePresence Collaboration Endpoint Software to the latest version provided by Cisco.
What type of vulnerability is cisco-sa-tele-info-DrEGLpDQ?
cisco-sa-tele-info-DrEGLpDQ is an information disclosure vulnerability affecting the video endpoint API of Cisco TelePresence products.
Who is affected by cisco-sa-tele-info-DrEGLpDQ?
Users of Cisco TelePresence Collaboration Endpoint Software are affected by the cisco-sa-tele-info-DrEGLpDQ vulnerability.
What could an attacker do with cisco-sa-tele-info-DrEGLpDQ?
An attacker exploiting cisco-sa-tele-info-DrEGLpDQ could gain access to sensitive information stored improperly in the affected device.
- agent/event
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- collector/cisco-advisory
- source/Cisco
- agent/severity
- agent/title
- agent/weakness
- agent/references
- agent/description
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco telepresence collaboration endpoint software