CVE-2020-26086

MEDIUM

Cisco TelePresence Collaboration Endpoint < 9.14.3 - Authenticated Sensitive Information Exposure via xAPI

Title source: llm
STIX 2.1

Description

A vulnerability in the video endpoint API (xAPI) of Cisco TelePresence Collaboration Endpoint (CE) Software could allow an authenticated, remote attacker to gain access to sensitive information on an affected device. The vulnerability is due to improper storage of sensitive information on an affected device. An attacker could exploit this vulnerability by accessing information that should not be accessible to users with low privileges. A successful exploit could allow the attacker to gain access to sensitive information.

References (1)

Core 1
Core References

Scores

CVSS v3 4.3
EPSS 0.0017
EPSS Percentile 38.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-668
Status published
Products (1)
cisco/telepresence_collaboration_endpoint < 9.14.3
Published Nov 06, 2020
Tracked Since Feb 18, 2026