CVE-2018-0422 — Incorrect Permission Assignment

Vendor	Product	Version range	Fixed in
cisco	webex_business_suite_32	< 32.15.20	32.15.20
cisco	webex_business_suite_33	< 33.4	33.4
cisco	webex_meetings	—	—
cisco	webex_meetings_online	< 1.3.37	1.3.37
cisco	webex_meetings_online	—	—
cisco	webex_meetings_online	—	—
cisco	webex_meetings_server	<= 3.0	—
cisco	webex_meetings_server	—	—

GHSA

GHSA-9mx2-579m-fvfq: A vulnerability in the folder permissions of Cisco Webex Meetings client for Windows could allow an authenticated, local attacker to modify locally st

ghsa_unreviewed·2022-05-13

CVE-2018-0422 [HIGH] CWE-732 GHSA-9mx2-579m-fvfq: A vulnerability in the folder permissions of Cisco Webex Meetings client for Windows could allow an authenticated, local attacker to modify locally st A vulnerability in the folder permissions of Cisco Webex Meetings client for Windows could allow an authenticated, local attacker to modify locally stored files and execute code on a targeted device with the privilege level of the user. The vulnerability is due to folder permissions that grant a user the permission to read, write, and execute files in the Webex folders. An attacker could exploit this vulnerability to write malicious files to the Webex client directory, affecting all other users of the targeted device. A successful exploit could allow a user to execute commands with elevated privileges. Attacks on single-user systems are less likely to occur, as the attack must be carried out by the user on the user's own system. Multiuser systems have a higher risk of exploitation because

Cisco

Cisco Webex Meetings Client for Windows Privilege Escalation Vulnerability

vendor_cisco·2018-09-05·CVSS 7.3

CVE-2018-0422 [HIGH] CWE-264 Cisco Webex Meetings Client for Windows Privilege Escalation Vulnerability Cisco Webex Meetings Client for Windows Privilege Escalation Vulnerability A vulnerability in the folder permissions of Cisco Webex Meetings client for Windows could allow an authenticated, local attacker to modify locally stored files and execute code on a targeted device with the privilege level of the user. The vulnerability is due to folder permissions that grant a user the permission to read, write, and execute files in the Webex folders. An attacker could exploit this vulnerability to write malicious files to the Webex client directory, affecting all other users of the targeted device. A successful exploit could allow a user to execute commands with elevated privileges. Attacks on single-user systems are less likely to occur, as the attack must be carried out by the user on the us

Cisco

Cisco Webex Meetings Client for Windows Privilege Escalation Vulnerability

vendor_cisco·CVSS 3.0

CVE-2018-0422 Cisco Webex Meetings Client for Windows Privilege Escalation Vulnerability CVE-2018-0422: Cisco Webex Meetings Client for Windows Privilege Escalation Vulnerability A vulnerability in the folder permissions of Cisco Webex Meetings client for Windows could allow an authenticated, local attacker to modify locally stored files and execute code on a targeted device with the privilege level of the user. The vulnerability is due to folder permissions that grant a user the permission to read, write, and execute files in the Webex folders. An attacker could exploit this vulnerability to write malicious files to the Webex client directory, affecting all other users of the targeted device. A successful exploit could allow a user to execute commands with elevated privileges. Attacks on single-user systems are less likely to occur, as the attack must be carried out by the us

CVE-2018-0422: A vulnerability in the folder permissions of Cisco Webex Meetings client for Windows could allow an authenticated, local attacker to modify locally stored…

Affected

CVSS provenance