PT-2018-11278

CVE-2018-12592

·

Published

2018-06-20

·

Updated

2018-08-23

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Polycom RealPresence Web Suite versions prior to 2.2.0
Description The issue allows a meeting invitee's video to be visible to other participants for a few seconds after joining a meeting, even if the invitee has chosen to turn off their video. This occurs because the software does not immediately block the user's video upon joining the meeting.
Recommendations For versions prior to 2.2.0, update to version 2.2.0 or later to resolve the issue. As a temporary workaround, consider informing users to wait a few seconds before interacting with the meeting to ensure their video is not unintentionally shared. Restrict access to meetings to minimize the risk of unintended video sharing until the update is applied.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾