CVSS 9.8 · Critical EPSS 2,4%
Kerentanan Improper Authentication pada cisco webex meetings, cisco webex meetings server. Skor CVSS 3.1 9.8 (Critical) menurut NVD.
A vulnerability in Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to gain unauthorized access to a vulnerable Webex site. The vulnerability is due to improper handling of authentication tokens by a vulnerable Webex site. An attacker could exploit this vulnerability by sending crafted requests to a vulnerable Cisco Webex Meetings or Cisco Webex Meetings Server site. If successful, the attacker could gain the privileges of another user within the affected Webex site.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| cisco | webex meetings | Semua versi hingga 39.5.25 |
| cisco | webex meetings | Versi 40.1.0 hingga 40.4.10 |
| cisco | webex meetings | Versi 40.6.0 |
| cisco | webex meetings server | Semua versi sebelum 4.0 |
| cisco | webex meetings server | Versi 4.0 |
| cisco | webex meetings server | Versi 4.0 maintenance_release1 |
| cisco | webex meetings server | Versi 4.0 maintenance_release2 |
| cisco | webex meetings server | Versi 4.0 maintenance_release3 |