CVE-2021-1242
Assigner: cisco
Published: 2021-01-13T00:00:00
State: PUBLISHED
affected: product: Cisco Webex Teams 
vendor: Cisco
versions: status: affected
version: n/a
datePublic: 2021-01-13T00:00:00
descriptions: value: A vulnerability in Cisco Webex Teams could allow an unauthenticated, remote attacker to manipulate file names within the messaging interface. The vulnerability exists because the affected software mishandles character rendering. An attacker could exploit this vulnerability by sharing a file within the application interface. A successful exploit could allow the attacker to modify how the shared file name displays within the interface, which could allow the attacker to conduct phishing or spoofing attacks.
exploits: value: The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory. 
metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4.3
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
version: 3.1
problemTypes: descriptions: cweId: CWE-450
description: CWE-450
type: CWE
source: advisory: cisco-sa-webex-teams-7ZMcXG99
defect: CSCvv74842
discovery: INTERNAL
title: Cisco Webex Teams Shared File Manipulation Vulnerability