CVE Vulnerabilities

CVE-2021-1517

Protection Mechanism Failure

Published: Jun 04, 2021 | Modified: Jun 15, 2021
CVSS 3.x
4.3
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS 2.x
4 MEDIUM
AV:N/AC:L/Au:S/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

A vulnerability in the multimedia viewer feature of Cisco Webex Meetings and Cisco Webex Meetings Server could allow an authenticated, remote attacker to bypass security protections. This vulnerability is due to unsafe handling of shared content within the multimedia viewer feature. An attacker could exploit this vulnerability by sharing a file through the multimedia viewer feature. A successful exploit could allow the attacker to bypass security protections and prevent warning dialogs from appearing before files are offered to other users.

Weakness

The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.

Affected Software

Name Vendor Start Version End Version
Webex_meetings_online Cisco 41.3.5 41.3.5
Webex_meetings_server Cisco * *
Webex_meetings_server Cisco 3.0 3.0
Webex_meetings_server Cisco 3.0 3.0
Webex_meetings_server Cisco 3.0 3.0
Webex_meetings_server Cisco 3.0 3.0
Webex_meetings_server Cisco 4.0 4.0
Webex_meetings_server Cisco 4.0 4.0
Webex_meetings_server Cisco 4.0 4.0
Webex_meetings_server Cisco 4.0 4.0
Webex_meetings_server Cisco 4.0 4.0
Webex_meetings_server Cisco 4.0 4.0

References