CVE-2020-3537

Name of the Vulnerable Software and Affected Versions: Cisco Jabber for Windows (affected versions not specified)

Description: The issue is related to improper validation of message contents, which could allow an authenticated, remote attacker to gain access to sensitive information. An attacker could exploit this by sending specially crafted messages that contain Universal Naming Convention (UNC) links to a targeted user and convincing the user to follow the provided link. This could allow the attacker to cause the application to access a remote system, possibly gaining access to sensitive information for use in additional attacks.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.