cisco-sa-20200124-webex-unauthjoin: Cisco Webex Meetings Suite and Cisco Webex Meetings Online Unauthenticated Meeting Join Vulnerability
First published: Fri Jan 24 2020(Updated: )
A vulnerability in Cisco Webex Meetings Suite sites and Cisco Webex Meetings Online sites could allow an unauthenticated, remote attendee to join a password-protected meeting without providing the meeting password. The connection attempt must initiate from a Webex mobile application for either iOS or Android. The vulnerability is due to unintended meeting information exposure in a specific meeting join flow for mobile applications. An unauthorized attendee could exploit this vulnerability by accessing a known meeting ID or meeting URL from the mobile device’s web browser. The browser will then request to launch the device’s Webex mobile application. A successful exploit could allow the unauthorized attendee to join the password-protected meeting. The unauthorized attendee will be visible in the attendee list of the meeting as a mobile attendee. Cisco has applied updates that address this vulnerability and no user action is required. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200124-webex-unauthjoin
Credit: This vulnerability was found during the resolution a Cisco TAC support case
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Webex Meetings | ||
| Cisco Webex Meetings |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-20200124-webex-unauthjoin?
The severity of cisco-sa-20200124-webex-unauthjoin is considered high due to the potential for unauthorized access to password-protected meetings.
How do I fix cisco-sa-20200124-webex-unauthjoin?
To fix cisco-sa-20200124-webex-unauthjoin, ensure you update to the latest version of Cisco Webex Meetings Suite or Webex Meetings Online as recommended by Cisco.
Who is affected by cisco-sa-20200124-webex-unauthjoin?
Users of Cisco Webex Meetings Suite and Cisco Webex Meetings Online are affected by cisco-sa-20200124-webex-unauthjoin.
What are the risks of cisco-sa-20200124-webex-unauthjoin?
The risks of cisco-sa-20200124-webex-unauthjoin include unauthorized individuals joining meetings, potentially exposing sensitive information.
When was the cisco-sa-20200124-webex-unauthjoin vulnerability disclosed?
The cisco-sa-20200124-webex-unauthjoin vulnerability was disclosed on January 24, 2020.
- agent/type
- agent/event
- agent/last-modified-date
- agent/first-publish-date
- collector/cisco-advisory
- source/Cisco
- agent/references
- agent/severity
- agent/weakness
- agent/description
- agent/title
- agent/author
- agent/source
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco webex meetings