Aller au contenu
en Se connecter
4.3 Moyenne

CVE-2021-34743 A vulnerability in the application integration feature of Cisco Webex Software could allow an unauthenticated, remote…

Description

A vulnerability in the application integration feature of Cisco Webex Software could allow an unauthenticated, remote attacker to authorize an external application to integrate with and access a user's account without that user's express consent. This vulnerability is due to improper validation of cross-site request forgery (CSRF) tokens. An attacker could exploit this vulnerability by convincing a targeted user who is currently authenticated to Cisco Webex Software to follow a link designed to pass malicious input to the Cisco Webex Software application authorization interface. A successful exploit could allow the attacker to cause Cisco Webex Software to authorize an application on the user's behalf without the express consent of the user, possibly allowing external applications to read data from that user's profile.

Produits et versions touchés

Produit Versions touchées Corrigé en
Cisco Webex Meetings Versions non publiées

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Cisco Webex Meetings

Les 46 CVE de Cisco Webex Meetings →
CVE-2026-20233 A vulnerability in the web-based user interface of Cisco Webex Meetings could have allowed an unauthenticated, remote… 6.1 Moyenne CVE-2026-20219 A vulnerability in the REST API of Cisco Slido could have allowed an authenticated, remote attacker to access the social… 5.4 Moyenne CVE-2026-20184 A vulnerability in the integration of single sign-on (SSO) with Control Hub in Cisco Webex Services could have allowed… 9.8 Critique CVE-2026-20149 A vulnerability in Cisco Webex could have allowed an unauthenticated, remote attacker to conduct a cross-site… 6.1 Moyenne
Suivre cette CVE