CVE-2017-12361
Description
A vulnerability in Cisco Jabber for Windows could allow an unauthenticated, local attacker to access sensitive communications made by the Jabber client. An attacker could exploit this vulnerability to gain information to conduct additional attacks. The vulnerability is due to the way Cisco Jabber for Windows handles random number generation for file folders. An attacker could exploit the vulnerability by fixing the random number data used to establish Secure Sockets Layer (SSL) connections between clients. An exploit could allow the attacker to decrypt secure communications made by the Cisco Jabber for Windows client. Cisco Bug IDs: CSCve44806.
Risk Information
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Vulnerabilities CVE-2017-12361 are affected in Cisco Jabber 11.8(0) | Windows |
| Vulnerabilities CVE-2017-12361 are affected in Cisco Jabber 11.8(1) | Windows |
| Vulnerabilities CVE-2017-12361 are affected in Cisco Jabber 11.8(2) | Windows |
| Vulnerabilities CVE-2017-12361 are affected in Cisco Jabber 11.8(3) | Windows |
| Cisco Jabber Information Disclosure Vulnerability For Cisco Jabber for Windows | NCM |
| Use of Insufficiently Random Values Vulnerability (CVE-2017-12361) | NCM |
Patch Details
Click to see the patches provided by ManageEngine for this CVE
| Patch ID | Patch Description |
|---|---|
| PATCH-1705811 | Security Update for Cisco Jabber for Windows 11.6(1.38147) |
| PATCH-350863 | Cisco Jabber (15.1.1) (Manual Upload Required) |
| PATCH-350863 | Cisco Jabber (15.1.1) (Manual Upload Required) |
| PATCH-350863 | Cisco Jabber (15.1.1) (Manual Upload Required) |
| PATCH-350863 | Cisco Jabber (15.1.1) (Manual Upload Required) |
References
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234