CVE-2021-1517

Medium

Description

A vulnerability in the multimedia viewer feature of Cisco Webex Meetings and Cisco Webex Meetings Server could allow an authenticated, remote attacker to bypass security protections. This vulnerability is due to unsafe handling of shared content within the multimedia viewer feature. An attacker could exploit this vulnerability by sharing a file through the multimedia viewer feature. A successful exploit could allow the attacker to bypass security protections and prevent warning dialogs from appearing before files are offered to other users.

SeverityMedium
CVSS5.0
Exploit probability—
ProductCisco Webex Meetings Online
PublishedJun 4, 2021
First seenJun 4, 2021
Weakness typeCWE-693CWE-693

How to fix

Affected products

ProductAffected versionsFixed in
cisco webex_meetings_online41.3.5—
cisco webex_meetings_serverv < 3.0, 3.0, 4.03.0

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.