PT-2018-8827 · Cisco · Cisco Webex Teams

Publicado 2018-10-05 · Atualizado 2024-05-23 · CVE-2018-0436

Positive Technologies (AI Summary)

CVSS v3.1

8.7

Alta

Vetor base

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Cisco Webex Teams (affected versions not specified)

Description A vulnerability could allow an authenticated, remote attacker to view and modify data for an organization other than their own organization. The issue exists because the affected software performs insufficient checks for associations between user accounts and organization accounts. An attacker with administrator or compliance officer privileges for one organization account could exploit this by using those privileges to view and modify data for another organization account. No customer data was impacted by this issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Improper Privilege Management

Enumeração de Fraquezas

CWE-284

CWE-269

Identificadores relacionados

CVE-2018-0436

Produtos afetados

Cisco Webex Teams

Referências · 5

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180905-webex-id-mod · Aviso do Fabricante
• http://securityfocus.com/bid/105301 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-0436 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-0436 · Aviso do Fabricante
• https://t.me/cvenotify/80892 · Publicação no Telegram