CVE-2021-1517
Assigner: cisco
Published: 2021-06-02T00:00:00
State: PUBLISHED
affected: product: Cisco WebEx Meetings Server 
vendor: Cisco
versions: status: affected
version: n/a
datePublic: 2021-06-02T00:00:00
descriptions: value: A vulnerability in the multimedia viewer feature of Cisco Webex Meetings and Cisco Webex Meetings Server could allow an authenticated, remote attacker to bypass security protections. This vulnerability is due to unsafe handling of shared content within the multimedia viewer feature. An attacker could exploit this vulnerability by sharing a file through the multimedia viewer feature. A successful exploit could allow the attacker to bypass security protections and prevent warning dialogs from appearing before files are offered to other users.
exploits: value: The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory. 
metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: LOW
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N
version: 3.1
problemTypes: descriptions: cweId: CWE-693
description: CWE-693
type: CWE
source: advisory: cisco-sa-webex-multimedia-26DpqVRO
defect: CSCvx80691
CSCvx82557
discovery: INTERNAL
title: Cisco Webex Meetings and Webex Meetings Server Multimedia Sharing Security Bypass Vulnerability