A vulnerability in Cisco Webex Meetings Desktop App for Windows could allow an authenticated, local malicious user to gain access to sensitive information on an affected system. The vulnerability is due to unsafe usage of shared memory that is used by the affected software. An attacker with permissions to view system memory could exploit this vulnerability by running an application on the local system that is designed to read shared memory. A successful exploit could allow the malicious user to retrieve sensitive information from the shared memory, including usernames, meeting information, or authentication tokens that could aid the attacker in future attacks.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
cisco webex meetings |
||
cisco webex meetings 40.6.0 |
Lack of protections around trace facility gives local users read and write access DB2 migration problems caused IBM to resurrect Netezza, according to analyst
A bug-hunter has uncovered a vulnerability in IBM's popular enterprise database which, if left unpatched, could allow a local user to access data and kick off a denial-of-service attack. Security firm Trustwave said the shared memory vulnerability in Db2 - CVE-2020-4414 - was similar to the problems found with Cisco's Webex in June (CVE-2020-3347). According to TrustWave, "Only Db2 for LUW (Linux, Unix, Windows) is affected. Db2 for other platforms like IBM mainframes and z/OS are unaffected." M...
Only if they'd already pwned your box, mind. Still: get patching! Who's still using Webex? Not even Cisco: Judge orders IT giant to use rival Zoom for virtual patent trial
Cisco Webex suffered from a vuln that could have allowed an attacker to access any account by simply copy-pasting a unique session token into a browser string. Although the attack described by Trustwave relied on the attacker already having access to the victim's system, which reduces the likelihood that this vuln was deployed in the wild by malicious people, it is, nonetheless, not a good thing. If a user installed the Webex desktop client and set it to automatically log in, the client saved a ...
Vulmon