Cisco Webex Teams Information Disclosure and Modification Vulnerability

A vulnerability in Cisco Webex Teams, formerly Cisco Spark, could allow an authenticated, remote attacker to view and modify data for an organization other than their own organization. The vulnerability exists because the affected software performs insufficient checks for associations between user accounts and organization accounts. An attacker who has administrator or compliance officer privileges for one organization account could exploit this vulnerability by using those privileges to view and modify data for another organization account. No customer data was impacted by this vulnerability.

N/A

访问控制不恰当

Cisco Webex Teams 访问控制错误漏洞

Cisco Webex Teams是美国思科（Cisco）公司的一款团队协作应用程序。该程序包括视频会议、消息群发和文件共享等功能。 Cisco Webex Teams 20180417-150803之前版本中存在访问控制错误漏洞，该漏洞源于软件对用户账户和组织账户之间的关联检查不充分。远程攻击者可利用该漏洞查看并修改其他组织的数据。

N/A

N/A