Cisco Unified Customer Voice Portal Information Disclosure Vulnerability
A vulnerability in the Java Remote Method Invocation (RMI) interface of Cisco Unified Customer Voice Portal (CVP) could allow an unauthenticated, remote attacker to access sensitive information on an affected device. The vulnerability exists because certain RMI listeners are not properly authenticated. An attacker could exploit this vulnerability by sending a crafted request to the affected listener. A successful exploit could allow the attacker to access sensitive information on an affected device. There are workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cvp-info-dislosure-NZBEwj9V ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cvp-info-dislosure-NZBEwj9V"]
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-3402US | high7.5OT elevated | — | ||
A vulnerability in the Java Remote Method Invocation (RMI) interface of Cisco Unified Customer Voice Portal (CVP) could allow an unauthenticated, remote attacker to access sensitiv… | ||||
references
External citations — patches, advisories, analysis.
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cvp-info-dislosure-NZBEwj9Vexternal
- Security Vulnerability Policyexternal
- considering software upgradesexternal
- Configuration Guide for Cisco Unified Customer Voice Portal, Release 12.5(1)external
- Cisco Security Advisories and Alerts pageexternal
remediations (2)
- FixedCisco Unified IP Interactive Voice Response (IVR)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - WorkaroundCisco Unified IP Interactive Voice Response (IVR)
There is a workaround that addresses this vulnerability. It is possible to configure certificate-based authentication for the vulnerable interface. This is documented in the Secure JMX Communication between OAMP and Call Server using Mutual Authentication section of the Configuration Guide for Cisco Unified Customer Voice Portal, Release 12.5(1) ["https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cust_contact/contact_center/customer_voice_portal/cvp_12_5/configuration/guide/ccvp_b_configuration-guide-12-5-1/ccvp_b_configuration-guide-12-5-1_chapter_010001.html?bookSearch=true"].
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan