A successful exploit could allow the attacker to cause the application to return sensitive authentication information to another system, which the attacker could use in further attacks.Ĭisco has released software updates that address this vulnerability. An attacker could exploit this vulnerability by sending crafted Extensible Messaging and Presence Protocol (XMPP) messages to an affected system. This vulnerability is due to improper validation of message content. Able to send XMPP messages to an affected systemĭetails about the vulnerabilities are as follows:ĬVE-2021-1569: Cisco Jabber for Windows Information Disclosure VulnerabilityĪ vulnerability in Cisco Jabber for Windows could allow an authenticated, remote attacker to access sensitive information.Authenticated to an Extensible Messaging and Presence Protocol (XMPP) server that the affected software is using.To exploit the vulnerabilities, an attacker must be:

In addition, a software release that is affected by one of the vulnerabilities may not be affected by the other vulnerability.

Exploitation of one of the vulnerabilities is not required to exploit the other vulnerability. The vulnerabilities are not dependent on one another.

Cisco jabber pc