CVE-2020-3142 — Improper Access Control in Cisco Webex Meetings Online

CWE-284 — Improper Access ControlCWE-306 — Missing Authentication for Critical Function5 documents5 sources
Severity
7.5HIGHNVD
EPSS
0.5%
top 34.16%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Cisco Webex Meetings OnlineCisco Webex Meetings
Timeline
PublishedJan 26
Latest updateMay 24

Description

A vulnerability in Cisco Webex Meetings Suite sites and Cisco Webex Meetings Online sites could allow an unauthenticated, remote attendee to join a password-protected meeting without providing the meeting password. The connection attempt must initiate from a Webex mobile application for either iOS or Android. The vulnerability is due to unintended meeting information exposure in a specific meeting join flow for mobile applications. An unauthorized attendee could exploit this vulnerability by acc…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5cisco/cisco_webex_meetingsearlier than 39.11.5, earlier than 40.1.3+1

🔴Vulnerability Details

2
GHSA
GHSA-58r3-xwfg-7j3x: [CVE-2020-3142_su] A vulnerability in Cisco Webex Meetings Suite sites and Cisco Webex Meetings Online sites could allow an unauthenticated, remote at↗2022-05-24
▶
CVEList
Cisco Webex Meetings Suite and Cisco Webex Meetings Online Unauthenticated Meeting Join Vulnerability↗2020-01-26
▶

📋Vendor Advisories

1
Cisco
Cisco Webex Meetings Suite and Cisco Webex Meetings Online Unauthenticated Meeting Join Vulnerability↗2020-01-24
▶

💬Community

1
Bugzilla
CVE-2020-5202 apt-cacher-ng: local unprivileged user can impersonate the apt-cacher-ng daemon leading to credentials leak↗2020-03-16
▶
CVE-2020-3142 — Improper Access Control in Cisco | cvebase