Description
A vulnerability in the logging component of Cisco TelePresence Collaboration Endpoint (CE) and Cisco RoomOS Software could allow an authenticated, remote attacker to view sensitive information in clear text on an affected system. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability exists because certain unencrypted credentials are stored when SIP media component logging is enabled. An attacker could exploit this vulnerability by accessing the audit logs on an affected system and obtaining credentials to which they may not normally have access. A successful exploit could allow the attacker to use those credentials to access confidential information, some of which may contain personally identifiable information (PII). Note: To access the logs that are stored in the Webex Cloud or stored on the device itself, an attacker must have valid administrative credentials.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Cisco Cisco RoomOS Software
Default version status: unknown
RoomOS 10.11.2.2affectedRoomOS 10.15.2.2affectedRoomOS 11.5.4.6affectedRoomOS 11.5.2.4affectedRoomOS 10.8.2.5affectedRoomOS 10.11.5.2affectedRoomOS 10.11.3.0affectedRoomOS 10.15.5.3affectedRoomOS 10.19.2.2affectedRoomOS 11.1.3.1affectedRoomOS 10.11.6.0affectedRoomOS 10.19.3.0affectedRoomOS 10.19.4.2affectedRoomOS 10.3.2.4affectedRoomOS 10.3.4.0affectedRoomOS 10.15.3.0affectedRoomOS 11.1.4.1affectedRoomOS 11.14.2.3affectedRoomOS 11.1.2.4affectedRoomOS 10.8.3.1affectedRoomOS 11.14.2.1affectedRoomOS 10.3.3.0affectedRoomOS 10.8.4.0affectedRoomOS 10.15.4.1affectedRoomOS 10.19.5.6affectedRoomOS 10.11.4.1affectedRoomOS 11.9.3.1affectedRoomOS 11.5.3.3affectedRoomOS 10.3.2.0affectedRoomOS 11.9.2.4affectedRoomOS 11.14.3.0affectedRoomOS 11.17.2.2affectedRoomOS 11.14.4.0affectedRoomOS 10.19 StepUpgaffectedRoomOS 11.17.3.0affectedRoomOS 11.20.2.3affectedRoomOS 11.14.5.0affectedRoomOS 11.17.4.0affectedRoomOS 11.20.3.0affectedRoomOS 11.23.1.6affectedRoomOS 11.23.1.8affectedRoomOS 11.24.1.5affectedRoomOS 11.24.2.4affectedRoomOS 11.24.3.0affectedRoomOS 11.24.4.1affectedRoomOS 11.27.2.0affectedRoomOS 11.28.1.3affectedRoomOS 11.27.3.0affected