A vulnerability in Cisco Webex Meetings for Android could allow an authenticated, remote attacker to modify the avatar of another user. This vulnerability is due to improper authorization checks. An attacker could exploit this vulnerability by sending a crafted request to the Cisco Webex Meetings client of a targeted user of a meeting in which they are both participants. A successful exploit could allow the attacker to modify the avatar of the targeted user.
References
| Link | Resource |
|---|---|
| https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-andro-iac-f3UR8frB | Vendor Advisory |
Configurations
History
05 Aug 2022, 17:36
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-284 |
NVD-CWE-Other |
19 Apr 2021, 14:02
| Type | Values Removed | Values Added |
|---|---|---|
| References | (CISCO) https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-andro-iac-f3UR8frB - Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : 4.0
v3 : 4.3 |
| CWE | CWE-269 | |
| CPE | cpe:2.3:a:cisco:webex_meetings:*:*:*:*:*:android:*:* |
08 Apr 2021, 05:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | A vulnerability in Cisco Webex Meetings for Android could allow an authenticated, remote attacker to modify the avatar of another user. This vulnerability is due to improper authorization checks. An attacker could exploit this vulnerability by sending a crafted request to the Cisco Webex Meetings client of a targeted user of a meeting in which they are both participants. A successful exploit could allow the attacker to modify the avatar of the targeted user. |
08 Apr 2021, 04:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2021-04-08 04:15
Updated : 2023-12-10 13:55
NVD link : CVE-2021-1467
Mitre link : CVE-2021-1467
CVE.ORG link : CVE-2021-1467
JSON object : View
Products Affected
cisco
- webex_meetings
CWE