cisco webex-meetings CVE-2020-3347 is a vulnerability in Cisco Webex Meetings
Published on June 18, 2020

Cisco Webex Meetings Desktop App for Windows Shared Memory Information Disclosure Vulnerability
A vulnerability in Cisco Webex Meetings Desktop App for Windows could allow an authenticated, local attacker to gain access to sensitive information on an affected system. The vulnerability is due to unsafe usage of shared memory that is used by the affected software. An attacker with permissions to view system memory could exploit this vulnerability by running an application on the local system that is designed to read shared memory. A successful exploit could allow the attacker to retrieve sensitive information from the shared memory, including usernames, meeting information, or authentication tokens that could aid the attacker in future attacks.

Vendor Advisory NVD

Weakness Type

What is an Information Disclosure Vulnerability?

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

CVE-2020-3347 has been classified to as an Information Disclosure vulnerability or weakness.


Products Associated with CVE-2020-3347

Want to know whenever a new CVE is published for Cisco Webex Meetings? stack.watch will email you.

Cisco Webex Meetings
 

Affected Versions

Cisco WebEx Meetings Server Version n/a is affected by CVE-2020-3347

Exploit Probability

EPSS
0.07%
Percentile
21.67%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.