Vulnerabilities > CVE-2021-1467 - Unspecified vulnerability in Cisco Webex Meetings

CVSS 4.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

NONE

Integrity impact

LOW

Availability impact

NONE

network

low complexity

cisco

NVD

Published: 2021-04-08

Updated: 2023-11-07

Summary

A vulnerability in Cisco Webex Meetings for Android could allow an authenticated, remote attacker to modify the avatar of another user. This vulnerability is due to improper authorization checks. An attacker could exploit this vulnerability by sending a crafted request to the Cisco Webex Meetings client of a targeted user of a meeting in which they are both participants. A successful exploit could allow the attacker to modify the avatar of the targeted user.

Vulnerable Configurations

Part	Description	Count
Application	Cisco Cisco Webex Meetings 8.0_Base Cisco Webex Meetings 9.5 Cisco Webex Meetings 9.6 Cisco Webex Meetings 9.8 Cisco Webex Meetings 10.0 Cisco Webex Meetings 10.1 Cisco Webex Meetings 10.2 Cisco Webex Meetings 10.3 Cisco Webex Meetings 10.4 Cisco Webex Meetings 10.5 Cisco Webex Meetings 10.6 Cisco Webex Meetings 10.7 Cisco Webex Meetings 11.0 Cisco Webex Meetings 11.1 Cisco Webex Meetings 11.2 Cisco Webex Meetings 11.3 Cisco Webex Meetings 11.4 Cisco Webex Meetings 11.5 Cisco Webex Meetings 11.6 Cisco Webex Meetings 11.7 Cisco Webex Meetings 11.7.0.236	21

References

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-andro-iac-f3UR8frB