CVE-2020-3441
Medium
Description
A vulnerability in Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to view sensitive information from the meeting room lobby. This vulnerability is due to insufficient protection of sensitive participant information. An attacker could exploit this vulnerability by browsing the Webex roster. A successful exploit could allow the attacker to gather information about other Webex participants, such as email address and IP address, while waiting in the lobby.
SeverityMedium
CVSS5.3
Exploit probability75. percentile1.6%
Product
Cisco Webex Meetings
PublishedNov 18, 2020
First seenNov 18, 2020
Weakness typeCWE-20Improper input validation
How to fix
Update
- cisco webex_meetings_server3.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco webex_meetings | v ≤ 40.6.11, v ≤ 40.11.3 | — |
| cisco webex_meetings_server | v < 3.0, 3.0, 4.0 | 3.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.