Cisco Webex Meetings and Webex Meetings Server Multimedia Sharing Security Bypass Vulnerability

A vulnerability in the multimedia viewer feature of Cisco Webex Meetings and Cisco Webex Meetings Server could allow an authenticated, remote attacker to bypass security protections. This vulnerability is due to unsafe handling of shared content within the multimedia viewer feature. An attacker could exploit this vulnerability by sharing a file through the multimedia viewer feature. A successful exploit could allow the attacker to bypass security protections and prevent warning dialogs from appearing before files are offered to other users.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N

保护机制失效

Cisco Webex Meeting Center安全漏洞

Cisco Webex Meeting Center是美国思科（Cisco）公司的一套在线协作视频会议解决方案。 Cisco 多款产品存在安全漏洞，该漏洞源于Cisco Webex meeting和Cisco Webex meeting Server的多媒体查看器特性存在漏洞，可使经过身份验证的远程攻击者可利用该漏洞绕过安全保护。此漏洞是由于在多媒体查看器特性中对共享内容的不安全处理造成的。攻击者可利用该漏洞可以利用这个漏洞，通过多媒体查看器特性共享文件。一个成功的漏洞可以让攻击者可利用该漏洞绕过安全保护

N/A

N/A