cisco-sa-webex-redirect-XuZFU3PH: Cisco Webex Meetings and Webex Meetings Server File Redirect Vulnerability
First published: Wed Jun 02 2021(Updated: )
A vulnerability in Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to redirect users to a malicious file. This vulnerability is due to improper validation of URL paths in the application interface. An attacker could exploit this vulnerability by persuading a user to follow a specially crafted URL that is designed to cause Cisco Webex Meetings to include a remote file in the web UI. A successful exploit could allow the attacker to cause the application to offer a remote file to a user, which could allow the attacker to conduct further phishing or spoofing attacks. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-redirect-XuZFU3PH
Credit: Alexandros Zacharis ENISA
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Webex Meetings Client | ||
| Cisco Webex Meetings Server |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-webex-redirect-XuZFU3PH?
The severity of cisco-sa-webex-redirect-XuZFU3PH is rated as high due to the potential for unauthorized redirection to malicious files.
How do I fix cisco-sa-webex-redirect-XuZFU3PH?
To fix cisco-sa-webex-redirect-XuZFU3PH, update your Cisco Webex Meetings or Webex Meetings Server to the latest available version provided by Cisco.
Who is affected by cisco-sa-webex-redirect-XuZFU3PH?
Cisco Webex Meetings and Cisco Webex Meetings Server users are affected by the vulnerability identified as cisco-sa-webex-redirect-XuZFU3PH.
What type of attack does cisco-sa-webex-redirect-XuZFU3PH enable?
cisco-sa-webex-redirect-XuZFU3PH enables an unauthenticated remote attacker to redirect users to malicious files.
What causes the cisco-sa-webex-redirect-XuZFU3PH vulnerability?
The cisco-sa-webex-redirect-XuZFU3PH vulnerability is caused by improper validation of URL paths in the Cisco Webex applications.
- agent/type
- agent/event
- agent/last-modified-date
- collector/cisco-advisory
- source/Cisco
- agent/weakness
- agent/author
- agent/severity
- agent/title
- agent/references
- agent/description
- agent/first-publish-date
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco webex meetings client
- canonical/cisco webex meetings server