CVE-2020-3501: cisco cisco webex meetings Improper Input Validation

Vulnerability summary

CVE-2020-3501 is a medium (CVSS 4.1) Improper Input Validation vulnerability in cisco cisco webex meetings. EPSS estimates a 1.02% chance of exploitation in the next 30 days, higher than 62.7% of scored vulnerabilities.

Timeline

1. 17-08-2020
   PublishedVulnerability first disclosed.
2. 13-11-2024
   Last modifiedVulnerability information updated.

Description

Multiple vulnerabilities in the user interface of Cisco Webex Meetings Desktop App could allow an authenticated, remote attacker to obtain restricted information from other Webex users. These vulnerabilities are due to improper input validation of parameters returned to the application from a web site. An attacker with a valid Webex account could exploit these vulnerabilities by persuading a user to follow a URL that is designed to return malicious path parameters to the affected software. A successful exploit could allow the attacker to obtain restricted information from other Webex users.

• CWE-20Improper Input ValidationThe product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.