PT-2024-5196 · Cisco · Cisco Webex App

Yassine Bengana · Published 2024-07-17 · Updated 2025-07-31 · CVE-2024-20396

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Cisco Webex App (affected versions not specified)

Description: A vulnerability in the protocol handlers of the application could allow an unauthenticated, remote attacker to gain access to sensitive information. This issue exists because the application does not safely handle file protocol handlers. An attacker could exploit this by persuading a user to follow a specially crafted link, causing the application to send requests. If the attacker can observe transmitted traffic in a privileged network position, a successful exploit could allow the attacker to capture sensitive information, including credential information, from the requests.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2024-05753

CVE-2024-20396

Affected Products

Cisco Webex App

References · 11

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-app-ZjNm8X8j#vp · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-20396 · Vendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-app-ZjNm8X8j · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-05753 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-20396 · Security Note
• https://t.me/cveNotify/130400 · Telegram Post
• https://vuldb.com/?id.271850 · Note
• https://vulners.com/vulnrichment/VULNRICHMENT:CVE-2024-20396 · Note
• https://t.me/cvenotify/86546 · Telegram Post
• https://t.me/cvedetector/1105 · Telegram Post
• https://recordedfuture.com/vulnerability-database/CVE-2024-20396 · Note