Poly Video - Sensitive Data Might Be Written to Log File
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in <PolyOS 4.6.1-444242, <TCOS 6.6.1-7001859
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: no
- Technical impact: partial
Summary
In limited scenarios, sensitive data might be written to the log file if an admin uses Microsoft Teams Admin Center (TAC) to make device configuration changes. The affected log file is visible only to users with admin credentials. This is limited to Microsoft TAC and does not affect configuration changes made using the provisioning server or the device WebUI.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: partial
- Record last updated
Affected versions
- HP Inc Poly G7500
fixed in <PolyOS 4.6.1-444242
- HP Inc Poly Studio G62
fixed in <PolyOS 4.6.1-444242
- HP Inc Poly Studio X72
fixed in <PolyOS 4.6.1-444242
- HP Inc Poly Studio X52
fixed in <PolyOS 4.6.1-444242
- HP Inc Poly Studio X32
fixed in <PolyOS 4.6.1-444242
- HP Inc Poly Studio X70
fixed in <PolyOS 4.6.1-444242
- HP Inc Poly Studio X50
fixed in <PolyOS 4.6.1-444242
- HP Inc Poly Studio X30
fixed in <PolyOS 4.6.1-444242
- HP Inc Poly Studio E70
fixed in <PolyOS 4.6.1-444242
- HP Inc Poly Studio E60
fixed in <PolyOS 4.6.1-444242
- HP Inc Poly EagleEye Cube
fixed in <PolyOS 4.6.1-444242
- HP Inc Polycom EagleEye IV
fixed in <PolyOS 4.6.1-444242
- HP Inc Poly Studio A2
fixed in <PolyOS 4.6.1-444242
- HP Inc Poly Studio USB
fixed in <PolyOS 4.6.1-444242
- HP Inc TC8
fixed in <TCOS 6.6.1-7001859
- HP Inc TC10
fixed in <TCOS 6.6.1-7001859