high8.1
CVE-2020-3361
A vulnerability in Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to gain unauthorized access to a vulner…
Impact
A vulnerability in Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to gain unauthorized access to a vulnerable Webex site. The vulnerability is due to improper handling of authentication tokens by a vulnerable Webex site. An attacker could exploit this vulnerability by sending crafted requests to a vulnerable Cisco Webex Meetings or Cisco Webex Meetings Server site. If successful, the attacker could gain the privileges of another user within the affected Webex site.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Webex Meetings | through 39.5.25 from 40.1.0 through 40.4.10 Version 40.6.0 |
| Cisco | Webex Meetings Server | before 4.0 Version 4.0 |