Cisco Meeting Management Information Disclosure Vulnerability (CVE-2024-20507) Advisory

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability Description: - Vulnerability Name: Cisco Meeting Management Information Disclosure Vulnerability - Vulnerability ID: cisco-sa-cmm-info-disc-9ZEMAhGA - CVE Number: CVE-2024-20507 - CVSS Score: Base 4.3 2. Affected Products: - Affected Product: Cisco Meeting Management - Affected Versions: Versions 3.10.0 and earlier 3. Vulnerability Impact: - Vulnerability Type: Information Disclosure - Vulnerability Description: Due to insecure storage of sensitive information in the logging subsystem of Cisco Meeting Management, attackers can view sensitive information by logging into the web management interface of the affected device. 4. Remediation: - Fix Released: Cisco has released software updates to address this vulnerability. - Workarounds: No workarounds are available. 5. Affected Product List: - Confirmed Affected Products: Only the products listed in the Affected Products section. - Confirmed Unaffected Products: Products listed in the Affected Products section are confirmed as unaffected. 6. Affected Software Versions: - Affected Software Versions: Versions 3.10.0 and earlier. 7. Exploitation and Announcement: - Exploitation: Cisco PSIRT has not identified any public exploitation or malicious use of this vulnerability. - Announcement: This vulnerability was discovered during internal security testing. 8. Source: - Discovery Source: Internal security testing. 9. Revision History: - Revision History: Lists revision versions, descriptions, sections, status, and dates. 10. Disclaimer: - Disclaimer: This document is provided "AS IS" without any warranty or guarantee, including but not limited to merchantability or fitness for a particular purpose. The use of this document or any linked materials is at the user’s own risk. Cisco reserves the right to modify or update this document at any time. This information helps users understand the details of the vulnerability, affected products and software versions, remediation steps, and how to obtain further information.

Goal Reached Thanks to every supporter — we hit 100%!

Cisco Meeting Management Information Disclosure Vulnerability (CVE-2024-20507) Advisory