Cisco Webex Meetings Suite sites and Cisco Webex Meetings Online sites could allow a remote malicious user to obtain sensitive information, caused by unintended meeting information exposure in a specific meeting join flow for mobile applications. By accessing a known meeting ID or meeting URL from the mobile device’s web browser, an attacker could exploit this vulnerability to join a password-protected meeting without providing the meeting password.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
cisco webex meetings online |
UPDATE
Cisco Systems has fixed a high-severity vulnerability in its popular Webex video conferencing platform, which could let strangers barge in on password-protected meetings – no authentication necessary.
A remote attacker would not need to be authenticated to exploit the flaw, according to Cisco. All an attacker would need is the meeting ID and a Webex mobile application for either iOS or Android.
“An unauthorized attendee could exploit this vulnerability by accessing a...
Vulmon