This vulnerability in whassan KI Live Video Conferences (up to version 5.5.15) permits an attacker with network access and no privileges to retrieve embedded sensitive system information, exposing confidential data to unauthorized entities. The CVSS 3.1 base score is 5.3, reflecting a medium severity with low complexity and no user interaction required. The vulnerability affects confidentiality only, with no impact on integrity or availability. There is no indication of known exploits or vendor-provided patches at this time.

An attacker can remotely access sensitive system information embedded within the KI Live Video Conferences application without authentication or user interaction. This exposure could lead to information disclosure that may assist further attacks or reconnaissance. However, the vulnerability does not allow modification or disruption of the system, limiting the impact to confidentiality.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix information is available, monitor vendor communications for updates. Until a fix is released, consider restricting network access to the affected application to trusted users only.