CVE-2020-3361: cisco cisco webex meetings server Improper Authentication

Vulnerability summary

CVE-2020-3361 is a critical (CVSS 9.8) Improper Authentication vulnerability in cisco cisco webex meetings server. EPSS estimates a 2.36% chance of exploitation in the next 30 days, higher than 83.5% of scored vulnerabilities.

Timeline

1. 18-06-2020
   PublishedVulnerability first disclosed.
2. 15-11-2024
   Last modifiedVulnerability information updated.

Description

A vulnerability in Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to gain unauthorized access to a vulnerable Webex site. The vulnerability is due to improper handling of authentication tokens by a vulnerable Webex site. An attacker could exploit this vulnerability by sending crafted requests to a vulnerable Cisco Webex Meetings or Cisco Webex Meetings Server site. If successful, the attacker could gain the privileges of another user within the affected Webex site.

• CWE-287Improper AuthenticationWhen an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.