ID
VAR-202011-1235
CVE
CVE-2020-3588
TITLE
Windows for Cisco Webex Meetings Desktop Path traversal vulnerability in application
Trust: 0.8
DESCRIPTION
A vulnerability in virtualization channel messaging in Cisco Webex Meetings Desktop App for Windows could allow a local attacker to execute arbitrary code on a targeted system. This vulnerability occurs when this app is deployed in a virtual desktop environment and using virtual environment optimization. This vulnerability is due to improper validation of messages processed by the Cisco Webex Meetings Desktop App. A local attacker with limited privileges could exploit this vulnerability by sending malicious messages to the affected software by using the virtualization channel interface. A successful exploit could allow the attacker to modify the underlying operating system configuration, which could allow the attacker to execute arbitrary code with the privileges of a targeted user. Note: This vulnerability can be exploited only when Cisco Webex Meetings Desktop App is in a virtual desktop environment on a hosted virtual desktop (HVD) and is configured to use the Cisco Webex Meetings virtual desktop plug-in for thin clients. Windows for Cisco Webex Meetings Desktop The application contains a path traversal vulnerability.Information is obtained, information is tampered with, and service is disrupted (DoS) It may be put into a state
Trust: 1.71
AFFECTED PRODUCTS
| vendor: | cisco | model: | webex meetings | scope: | gte | version: | 40.8.0 | Trust: 1.0 |
| vendor: | cisco | model: | webex meetings | scope: | lt | version: | 40.6.9 | Trust: 1.0 |
| vendor: | cisco | model: | webex meetings | scope: | lt | version: | 40.8.9 | Trust: 1.0 |
| vendor: | シスコシステムズ | model: | cisco webex meetings desktop | scope: | eq | version: | - | Trust: 0.8 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-22 | Trust: 1.1 |
| problemtype: | Path traversal (CWE-22) [NVD Evaluation ] | Trust: 0.8 |
THREAT TYPE
local
Trust: 0.6
TYPE
path traversal
Trust: 0.6
PATCH
| title: | cisco-sa-webex-vdi-qQrpBwuJ | url: | https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-vdi-qQrpBwuJ | Trust: 0.8 |
| title: | Cisco Webex Meetings Desktop App Repair measures for path traversal vulnerabilities | url: | http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=133202 | Trust: 0.6 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2020-3588 | Trust: 2.5 |
| db: | JVNDB | id: | JVNDB-2020-013406 | Trust: 0.8 |
| db: | CNNVD | id: | CNNVD-202011-344 | Trust: 0.7 |
| db: | AUSCERT | id: | ESB-2020.3843 | Trust: 0.6 |
| db: | VULHUB | id: | VHN-181713 | Trust: 0.1 |
REFERENCES
| url: | https://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-webex-vdi-qqrpbwuj | Trust: 1.7 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2020-3588 | Trust: 1.4 |
| url: | https://www.auscert.org.au/bulletins/esb-2020.3843/ | Trust: 0.6 |
SOURCES
| db: | VULHUB | id: | VHN-181713 |
| db: | JVNDB | id: | JVNDB-2020-013406 |
| db: | CNNVD | id: | CNNVD-202011-344 |
| db: | NVD | id: | CVE-2020-3588 |
LAST UPDATE DATE
2024-11-23T23:04:13.115000+00:00
SOURCES UPDATE DATE
| db: | VULHUB | id: | VHN-181713 | date: | 2020-11-24T00:00:00 |
| db: | JVNDB | id: | JVNDB-2020-013406 | date: | 2021-07-01T09:05:00 |
| db: | CNNVD | id: | CNNVD-202011-344 | date: | 2020-11-27T00:00:00 |
| db: | NVD | id: | CVE-2020-3588 | date: | 2024-11-21T05:31:21.987 |
SOURCES RELEASE DATE
| db: | VULHUB | id: | VHN-181713 | date: | 2020-11-06T00:00:00 |
| db: | JVNDB | id: | JVNDB-2020-013406 | date: | 2021-07-01T00:00:00 |
| db: | CNNVD | id: | CNNVD-202011-344 | date: | 2020-11-04T00:00:00 |
| db: | NVD | id: | CVE-2020-3588 | date: | 2020-11-06T19:15:15.110 |