CVE-2020-26086
MEDIUMCisco Telepresence Collaboration Endpoint - Exposure to Wrong Actor
Title source: ruleDescription
A vulnerability in the video endpoint API (xAPI) of Cisco TelePresence Collaboration Endpoint (CE) Software could allow an authenticated, remote attacker to gain access to sensitive information on an affected device. The vulnerability is due to improper storage of sensitive information on an affected device. An attacker could exploit this vulnerability by accessing information that should not be accessible to users with low privileges. A successful exploit could allow the attacker to gain access to sensitive information.
Scores
CVSS v3
4.3
EPSS
0.0017
EPSS Percentile
38.5%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Classification
CWE
CWE-668
Status
published
Affected Products (1)
cisco/telepresence_collaboration_endpoint
< 9.14.3
Timeline
Published
Nov 06, 2020
Tracked Since
Feb 18, 2026