Cisco Webex Meetings Certificate Validation Vulnerability

A vulnerability in the integration of single sign-on (SSO) with Control Hub in Cisco Webex Services could have allowed an unauthenticated, remote attacker to impersonate any user within the service. This vulnerability existed because of improper certificate validation. Prior to this vulnerability being addressed, an attacker could have exploited this vulnerability by connecting to a service endpoint and supplying a crafted token. A successful exploit could have allowed the attacker to gain unauthorized access to legitimate Cisco Webex services.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

证书验证不恰当

Cisco Webex Services 安全漏洞

Cisco Webex Services是美国思科（Cisco）公司的一系列在线协作服务。 Cisco Webex Services存在安全漏洞，该漏洞源于证书验证不当，可能导致未经验证的远程攻击者冒充服务内的任何用户。

N/A

N/A