CVE-2020-3402

Cisco Unified Customer Voice Portal Information Disclosure Vulnerability

State: Published
Severity: 5.3 Medium
Published: Jul 2, 2020
Updated: Nov 15, 2024
Reserved: Dec 12, 2019

Description

A vulnerability in the Java Remote Method Invocation (RMI) interface of Cisco Unified Customer Voice Portal (CVP) could allow an unauthenticated, remote attacker to access sensitive information on an affected device. The vulnerability exists because certain RMI listeners are not properly authenticated. An attacker could exploit this vulnerability by sending a crafted request to the affected listener. A successful exploit could allow the attacker to access sensitive information on an affected device.

Scores

CVSS	Score	Vector	Source
3.0	5.3 Medium	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N	cisco

Weaknesses

CWE-306

Affected Products

Product	Versions
Cisco Unified IP Interactive Voice Response (IVR)Cisco	n/aAffected

References

20200701 Cisco Unified Customer Voice Portal Information Disclosure Vulnerabilityvendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.