cvelist/2020/12xxx/CVE-2020-12339.json

{
    "data_type": "CVE",
    "data_format": "MITRE",
    "data_version": "4.0",
    "CVE_data_meta": {
        "ID": "CVE-2020-12339",
        "ASSIGNER": "secure@intel.com",
        "STATE": "PUBLIC"
    },
    "affects": {
        "vendor": {
            "vendor_data": [
                {
                    "vendor_name": "n/a",
                    "product": {
                        "product_data": [
                            {
                                "product_name": "Intel(R) Collaboration Suite for WebRTC",
                                "version": {
                                    "version_data": [
                                        {
                                            "version_value": "before version 4.3.1"
                                        }
                                    ]
                                }
                            }
                        ]
                    }
                }
            ]
        }
    },
    "problemtype": {
        "problemtype_data": [
            {
                "description": [
                    {
                        "lang": "eng",
                        "value": "escalation of privilege"
                    }
                ]
            }
        ]
    },
    "references": {
        "reference_data": [
            {
                "refsource": "MISC",
                "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00425.html",
                "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00425.html"
            }
        ]
    },
    "description": {
        "description_data": [
            {
                "lang": "eng",
                "value": "Insufficient control flow management in the API for the Intel(R) Collaboration Suite for WebRTC before version 4.3.1 may allow an authenticated user to potentially enable escalation of privilege via network access."
            }
        ]
    }
}