60
CVE-2020-25605
PoC —CVSS 3.1
5.9 medium
EPSS
6%p93
Published
()
Modified
Description
Cleartext transmission of sensitive information in Agora Video SDK prior to 3.1 allows a remote attacker to obtain access to audio and video of any ongoing Agora video call through observation of cleartext network traffic.
- Vendors
- agora
- Products
- video software development kit
- Weakness
- CWE-319
- Vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N