CVE-2017-12361

Name of the Vulnerable Software and Affected Versions Cisco Jabber for Windows (affected versions not specified)

Description A vulnerability in Cisco Jabber for Windows could allow an unauthenticated, local attacker to access sensitive communications made by the Jabber client. The issue arises from the way Cisco Jabber for Windows handles random number generation for file folders. An attacker could exploit this by fixing the random number data used to establish Secure Sockets Layer (SSL) connections between clients, potentially allowing them to decrypt secure communications made by the Cisco Jabber for Windows client.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.