CVE-2019-12645

Name of the Vulnerable Software and Affected Versions Cisco Jabber Client Framework for Mac (affected versions not specified)

Description The issue is related to improper file level permissions, allowing an authenticated, local attacker to execute arbitrary code on an affected device. An attacker could exploit this by authenticating to the device and executing arbitrary code or modifying certain configuration files. A successful exploit could allow the attacker to execute arbitrary code or modify configuration files using the privileges of the installed Cisco JCF for Mac Software.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.