CVE-2022-20768

A vulnerability in the logging component of Cisco TelePresence Collaboration Endpoint (CE) and RoomOS Software could allow an authenticated, remote attacker to view sensitive information in clear text on an affected system. This vulnerability is due to the storage of certain unencrypted credentials. An attacker could exploit this vulnerability by accessing the audit logs on an affected system and obtaining credentials that they may not normally have access to. A successful exploit could allow the attacker to use those credentials to access confidential information, some of which may contain personally identifiable information (PII). Note: To access the logs that are stored in the RoomOS Cloud, an attacker would need valid Administrator-level credentials.

• CWE-532
• CWE-532

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-roomos-infodisc-YOTz9Ct7Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-roomos-infodisc-YOTz9Ct7Vendor Advisory

Published

Jul 6, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-20762A vulnerability in the Common Execution Environment (CEE) Co…7.8
• CVE-2022-20763A vulnerability in the login authorization components of Cis…8.8
• CVE-2022-20764Multiple vulnerabilities in the web engine of Cisco TelePres…8.1
• CVE-2022-20765A vulnerability in the web applications of Cisco UCS Directo…4.8
• CVE-2022-20766A vulnerability in the Cisco Discovery Protocol functio…5.3
• CVE-2022-20767A vulnerability in the Snort rule evaluation function of Cis…7.5
• CVE-2022-20769A vulnerability in the authentication functionality of Cisco…6.5
• CVE-2022-2077Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-20770On April 20, 2022, the following vulnerability in the ClamAV…7.5
• CVE-2022-20771On April 20, 2022, the following vulnerability in the ClamAV…7.5
• CVE-2022-20772A vulnerability in Cisco Email Security Appliance (ESA) and …5.3
• CVE-2022-20773A vulnerability in the key-based SSH authentication mechanis…7.5