cisco-sa-webex-8fpBnKOz: Cisco Webex Meetings Client Software Logging Information Disclosure Vulnerability
First published: Wed Jun 02 2021(Updated: )
A vulnerability in logging mechanisms of Cisco Webex Meetings client software could allow an authenticated, local attacker to gain access to sensitive information. This vulnerability is due to unsafe logging of application actions. An attacker could exploit this vulnerability by logging onto the local system and accessing files containing the logged details. A successful exploit could allow the attacker to gain access to sensitive information, including meeting data and recorded meeting transcriptions. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-8fpBnKOz
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Webex Meetings Client |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-webex-8fpBnKOz?
The severity of cisco-sa-webex-8fpBnKOz is classified as high due to the potential for sensitive information leakage.
How do I fix cisco-sa-webex-8fpBnKOz?
To fix cisco-sa-webex-8fpBnKOz, update the Cisco Webex Meetings client to the latest version provided by Cisco.
Who is affected by cisco-sa-webex-8fpBnKOz?
All authenticated users of the Cisco Webex Meetings client software are potentially affected by cisco-sa-webex-8fpBnKOz.
What causes cisco-sa-webex-8fpBnKOz?
cisco-sa-webex-8fpBnKOz is caused by unsafe logging mechanisms in the Cisco Webex Meetings client.
What information could be compromised by cisco-sa-webex-8fpBnKOz?
cisco-sa-webex-8fpBnKOz could allow access to sensitive user information logged by the application.
- agent/type
- agent/event
- collector/cisco-advisory
- source/Cisco
- agent/weakness
- agent/severity
- agent/last-modified-date
- agent/title
- agent/references
- agent/description
- agent/first-publish-date
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco webex meetings client