Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2020-3402

Cisco Unified Customer Voice Portal Information Disclosure Vulnerability

Description

A vulnerability in the Java Remote Method Invocation (RMI) interface of Cisco Unified Customer Voice Portal (CVP) could allow an unauthenticated, remote attacker to access sensitive information on an affected device. The vulnerability exists because certain RMI listeners are not properly authenticated. An attacker could exploit this vulnerability by sending a crafted request to the affected listener. A successful exploit could allow the attacker to access sensitive information on an affected device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cisco Cisco Unified IP Interactive Voice Response (IVR)

  • n/aaffected

References