PT-2021-4813 · Cisco · Cisco Webex Video Mesh

Published 2021-11-03 · Updated 2021-11-05 · CVE-2021-1500

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Cisco Webex Video Mesh (affected versions not specified)

Description The issue is related to improper input validation of the URL parameters in an HTTP request, which could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This is known as an open redirect attack and can be used as part of a phishing attack to persuade users to unknowingly visit malicious sites. An attacker could exploit this by persuading a user to click a crafted link.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

BDU:2021-05541

CVE-2021-1500

Affected Products

Cisco Webex Video Mesh

References · 6

• https://bdu.fstec.ru/vul/2021-05541 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vmesh-openred-AGNRmf5 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-1500 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-1500 · Security Note
• https://t.me/cibsecurity/31828 · Telegram Post
• https://t.me/cvenotify/23060 · Telegram Post