PT-2019-4325 · Cisco · Cisco Webex Meetings
Publicado
2019-11-20
·
Atualizado
2021-11-02
·
CVE-2019-15960
CVSS v2.0
6.5
Média
| Vetor | AV:N/AC:L/Au:S/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Cisco Webex Meetings (affected versions not specified)
Description
The issue is related to insufficient access control validation, allowing an authenticated, remote attacker to elevate privileges in the context of the affected Webex Network Recording Admin page. To exploit this, the attacker must be logged in as a low-level administrator and submit a crafted URL request to gain privileged access. A successful exploit could allow the attacker to view or delete recordings they would not normally be able to access.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Cisco Webex Meetings