CNNVD-202510-2106 Information

CNNVD ID

CNNVD-202510-2106

CVE-2025-20329

  • CNNVD Published: 2025-10-15

Description (Chinese)

Cisco TelePresence Collaboration Endpoint Software是美国思科(Cisco)公司的一套协作终端软件。 Cisco TelePresence Collaboration Endpoint Software存在日志信息泄露漏洞,该漏洞源于启用SIP媒体组件日志记录时会存储未加密凭据,可能导致敏感信息泄露。

Description (English)

Cisco TelePresence College Endpoint Software is a collaborative terminal software for Cisco. Cisco TelePresence Collection Endpoint Software has a leak in log information, which stems from the fact that unencrypted documents are stored when the SIP Media Component Log is enabled, which may lead to the disclosure of sensitive information.

Hazard Level

High

Vulnerability Type

日志信息泄露

Affected Vendor

思科

Published

2025-10-15

Last Modified

2026-02-24

References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-roomos-inf-disc-qGgsbxAm https://access.redhat.com/security/cve/cve-2025-20329

Patch

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-roomos-inf-disc-qGgsbxAm

Share on: