Cisco Webex Meetings Client Software Logging Information Disclosure Vulnerability

A vulnerability in logging mechanisms of Cisco Webex Meetings client software could allow an authenticated, local attacker to gain access to sensitive information. This vulnerability is due to unsafe logging of application actions. An attacker could exploit this vulnerability by logging onto the local system and accessing files containing the logged details. A successful exploit could allow the attacker to gain access to sensitive information, including meeting data and recorded meeting transcriptions.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

将系统数据暴露到未授权控制的范围

Cisco Webex meeting客户端软件日志机制 信息泄露漏洞

Cisco Webex Meetings是美国思科（Cisco）公司的一套视频会议解决方案。 Cisco Webex meeting客户端软件的日志机制存在信息泄露漏洞，该漏洞源于经过身份验证的本地攻击者可利用该漏洞获得访问敏感信息的权限。此漏洞是由于应用程序操作的不安全日志造成的。攻击者可利用该漏洞可以通过登录到本地系统并访问包含日志详细信息的文件来利用漏洞获得敏感信息（包括会议数据和记录的会议转录）

N/A

N/A