CVE-2021-1517
Description
A vulnerability in the multimedia viewer feature of Cisco Webex Meetings and Cisco Webex Meetings Server could allow an authenticated, remote attacker to bypass security protections. This vulnerability is due to unsafe handling of shared content within the multimedia viewer feature. An attacker could exploit this vulnerability by sharing a file through the multimedia viewer feature. A successful exploit could allow the attacker to bypass security protections and prevent warning dialogs from appearing before files are offered to other users.
How to fix
- cisco webex_meetings_server3.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco webex_meetings_online | 41.3.5 | — |
| cisco webex_meetings_server | v < 3.0, 3.0, 4.0 | 3.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.