cisco-sa-20180905-webex-id-mod: Cisco Webex Teams Information Disclosure and Modification Vulnerability
A vulnerability in Cisco Webex Teams, formerly Cisco Spark, could allow an authenticated, remote attacker to view and modify data for an organization other than their own organization. The vulnerability exists because the affected software performs insufficient checks for associations between user accounts and organization accounts. An attacker who has administrator or compliance officer privileges for one organization account could exploit this vulnerability by using those privileges to view and modify data for another organization account. No customer data was impacted by this vulnerability. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180905-webex-id-mod
Affected Software
Event History
Frequently Asked Questions
What is the severity of cisco-sa-20180905-webex-id-mod?
The severity of cisco-sa-20180905-webex-id-mod is classified as high due to the potential for unauthorized data access and modification.
How do I fix cisco-sa-20180905-webex-id-mod?
To fix cisco-sa-20180905-webex-id-mod, update Cisco Webex Teams to the latest version as provided by Cisco.
Who is affected by cisco-sa-20180905-webex-id-mod?
Organizations using Cisco Webex Teams are affected by the vulnerability cisco-sa-20180905-webex-id-mod.
What type of attack does cisco-sa-20180905-webex-id-mod facilitate?
The vulnerability cisco-sa-20180905-webex-id-mod facilitates remote authenticated attackers to view and modify unauthorized organizational data.
What is the cause of cisco-sa-20180905-webex-id-mod?
The cause of cisco-sa-20180905-webex-id-mod is the software’s insufficient checks for organizational association.