PT-2021-1708 · Cisco · Cisco Webex Meetings

Nabeel Ahmed + 1 · Published 2021-01-13 · Updated 2024-04-11 · CVE-2021-1310

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Cisco Webex Meetings (affected versions not specified)

Description The issue is related to improper input validation of the URL parameters in an HTTP request, allowing an unauthenticated, remote attacker to redirect a user to an untrusted web page, bypassing the warning mechanism. This can be exploited by persuading a user to click a crafted link, potentially leading to phishing attacks. The vulnerability is known as an open redirect attack, which could convince users to unknowingly visit malicious sites.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

BDU:2021-00394

CVE-2021-1310

Affected Products

Cisco Webex Meetings

References · 6

• https://osv.dev/vulnerability/CVE-2021-1310 · Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-open-redirect-PWvBQ2q · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-00394 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-1310 · Security Note
• https://t.me/cibsecurity/22102 · Telegram Post
• https://t.me/cvenotify/76431 · Telegram Post