Skip to content
fr Sign in
5.3 Medium

CVE-2024-20396 A vulnerability in the protocol handlers of Cisco Webex App could allow an unauthenticated, remote attacker to gain…

Description

A vulnerability in the protocol handlers of Cisco Webex App could allow an unauthenticated, remote attacker to gain access to sensitive information. This vulnerability exists because the affected application does not safely handle file protocol handlers. An attacker could exploit this vulnerability by persuading a user to follow a link that is designed to cause the application to send requests. If the attacker can observe transmitted traffic in a privileged network position, a successful exploit could allow the attacker to capture sensitive information, including credential information, from the requests.

Affected products and versions

Product Affected versions Fixed in
Cisco Webex Teams 43.4.0.25788 No fix stated
Cisco Webex Teams 43.3.0.25468 No fix stated
Cisco Webex Teams 43.2 43.2.0.25157 → 43.2.0.25211 No fix stated
Cisco Webex Teams 43.1.0.24716 No fix stated
Cisco Webex Teams 42.12.0.24485 No fix stated
Cisco Webex Teams 42.11.0.24187 No fix stated
Cisco Webex Teams 42.10.0.23814 No fix stated
Cisco Webex Teams 42.9.0.23494 No fix stated
Cisco Webex Teams 42.8 42.8.0.23214 → 42.8.0.23281 No fix stated
Show the 8 other branches
Product Affected versions Fixed in
Cisco Webex Teams 42.7 42.7.0.22904 → 42.7.0.23054 No fix stated
Cisco Webex Teams 42.6 42.6.0.22565 → 42.6.0.22645 No fix stated
Cisco Webex Teams 42.5.0.22259 No fix stated
Cisco Webex Teams 42.4.1.22032 No fix stated
Cisco Webex Teams 42.3.0.21576 No fix stated
Cisco Webex Teams 42.2 42.2.0.21338 → 42.2.0.21486 No fix stated
Cisco Webex Teams 42.1.0.21190 No fix stated
Cisco Webex Teams 3.0 3.0.13464.0 → 3.0.16285.0 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Cisco Webex Teams

The 14 CVEs of Cisco Webex Teams →
CVE-2025-20236 A vulnerability in the custom URL parser of Cisco Webex App could allow an unauthenticated, remote attacker to… 8.8 High CVE-2020-26067 A vulnerability in the web-based interface of Cisco Webex Teams could allow an authenticated, remote attacker to… 5.4 Medium CVE-2024-20395 A vulnerability in the media retrieval functionality of Cisco Webex App could allow an unauthenticated, adjacent… 6.4 Medium CVE-2023-20104 A vulnerability in the file upload functionality of Cisco Webex App for Web could allow an unauthenticated, remote… 6.1 Medium
Track this CVE