Exposure of Resource to Wrong Sphere in Cisco Jabber

1) Exposure of Resource to Wrong Sphere

EUVDB-ID: #VU67953

Risk: Low

CVSSv3.1: 3.8 [CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-20917

CWE-ID: CWE-668 - Exposure of resource to wrong sphere

Exploit availability: No

Description

The vulnerability allows a remote attacker to compromise the system.

The vulnerability exists due to the improper handling of nested Extensible Messaging and Presence Protocol (XMPP) messages. A remote user can send specially crafted XMPP messages and cause the Jabber client application to perform unsafe actions.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

Cisco Jabber for Windows: 12.5 - 14.1

Cisco Jabber for MacOS: 12.7 - 14.1

Cisco Jabber for Android and iOS: 14.1

Cisco Jabber for Android MAM: 14.1

Cisco Jabber for iOS MAM: 14.1

External links

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-jabber-xmpp-Ne9SCM

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.