Sensitive Information Disclosure in Cisco Jabber Guest Server using HTML5

CVE-2014-8025

Summary

The Guest Server in Cisco Jabber, when utilizing HTML5, is susceptible to a vulnerability that enables remote attackers to potentially access sensitive data through network sniffing during HTTP GET or POST operations. This occurs when the API processes responses, allowing malicious entities to exploit this weakness and intercept data transmitted over the network.

References