CVE-2020-3498

MEDIUM

Cisco Jabber 12.1-12.1.2 - Authenticated Information Disclosure via Message Content

Title source: llm
STIX 2.1

Description

A vulnerability in Cisco Jabber software could allow an authenticated, remote attacker to gain access to sensitive information. The vulnerability is due to improper validation of message contents. An attacker could exploit this vulnerability by sending specially crafted messages to a targeted system. A successful exploit could allow the attacker to cause the application to return sensitive authentication information to another system, possibly for use in further attacks.

References (1)

Core 1
Core References

Scores

CVSS v3 6.5
EPSS 0.0031
EPSS Percentile 54.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-20 CWE-200
Status published
Products (1)
cisco/jabber 12.1 - 12.1.3
Published Sep 04, 2020
Tracked Since Feb 18, 2026