CVE-2017-12361 (CNNVD-201711-1205)
中文标题:
Cisco Jabber for Windows 信息泄露漏洞
英文标题:
A vulnerability in Cisco Jabber for Windows could allow an unauthenticated, local attacker to access...
漏洞描述
中文描述:
Cisco Jabber for Windows是美国思科（Cisco）公司的一套用于Windows平台的统一通信客户端解决方案。该方案提供了在线状态显示、即时消息、语音等功能。 基于Windows平台的Cisco Jabber中存在信息泄露漏洞，该漏洞源于程序如何处理随机数的产生。本地攻击者可通过固定用于建立客户端之间的Secure Sockets Layer (SSL)连接的随机数数据利用该漏洞访问Jabber客户端产生的敏感通信。
英文描述:
A vulnerability in Cisco Jabber for Windows could allow an unauthenticated, local attacker to access sensitive communications made by the Jabber client. An attacker could exploit this vulnerability to gain information to conduct additional attacks. The vulnerability is due to the way Cisco Jabber for Windows handles random number generation for file folders. An attacker could exploit the vulnerability by fixing the random number data used to establish Secure Sockets Layer (SSL) connections between clients. An exploit could allow the attacker to decrypt secure communications made by the Cisco Jabber for Windows client. Cisco Bug IDs: CSCve44806.
CWE类型:
标签:
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| cisco | jabber | 11.8\(0\) | - | - |
cpe:2.3:a:cisco:jabber:11.8\(0\):*:*:*:*:windows:*:*
|
| cisco | jabber | 11.8\(1\) | - | - |
cpe:2.3:a:cisco:jabber:11.8\(1\):*:*:*:*:windows:*:*
|
| cisco | jabber | 11.8\(2\) | - | - |
cpe:2.3:a:cisco:jabber:11.8\(2\):*:*:*:*:windows:*:*
|
| cisco | jabber | 11.8\(3\) | - | - |
cpe:2.3:a:cisco:jabber:11.8\(3\):*:*:*:*:windows:*:*
|
解决方案
中文解决方案:
英文解决方案:
临时解决方案:
CVSS评分详情
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
时间信息
利用信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2017-12361 |
2025-11-11 15:19:17 | 2025-11-11 07:34:33 |
| NVD | nvd_CVE-2017-12361 |
2025-11-11 14:55:34 | 2025-11-11 07:43:12 |
| CNNVD | cnnvd_CNNVD-201711-1205 |
2025-11-11 15:09:56 | 2025-11-11 07:53:22 |
版本与语言
安全公告
变更历史
查看详细变更
- vulnerability_type: 未提取 -> 授权问题
- cnnvd_id: 未提取 -> CNNVD-201711-1205
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
查看详细变更
- cvss_score: 未提取 -> 4.0
- cvss_vector: NOT_EXTRACTED -> CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- cvss_version: NOT_EXTRACTED -> 3.0
- affected_products_count: 0 -> 4
- data_sources: ['cve'] -> ['cve', 'nvd']