CVE-2020-3361: Cisco Webex Meetings and Cisco Webex Meetings Server Token Handling Unauthorized Access Vulnerability
A vulnerability in Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to gain unauthorized access to a vulnerable Webex site. The vulnerability is due to improper handling of authentication tokens by a vulnerable Webex site. An attacker could exploit this vulnerability by sending crafted requests to a vulnerable Cisco Webex Meetings or Cisco Webex Meetings Server site. If successful, the attacker could gain the privileges of another user within the affected Webex site.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-3361?
CVE-2020-3361 is a vulnerability in Cisco Webex Meetings and Cisco Webex Meetings Server that allows an unauthenticated, remote attacker to gain unauthorized access to a vulnerable Webex site.
How does CVE-2020-3361 affect Cisco Webex Meetings and Cisco Webex Meetings Server?
CVE-2020-3361 affects Cisco Webex Meetings and Cisco Webex Meetings Server by allowing an unauthenticated, remote attacker to gain unauthorized access to a vulnerable Webex site.
What is the severity of CVE-2020-3361?
CVE-2020-3361 has a severity rating of 9.8 out of 10, which is considered critical.
How can an attacker exploit CVE-2020-3361?
An attacker can exploit CVE-2020-3361 by improperly handling authentication tokens to gain unauthorized access to a vulnerable Webex site.
Is there a fix for CVE-2020-3361?
Yes, Cisco has released a security advisory with recommendations and patches to address the vulnerability. Please refer to the provided reference for more information.