Cisco Webex bug allowed anyone to join a top-secret password-protected meeting

Cisco Webex bug allowed anyone to join a top-secret password-protected meeting

4 years ago
Anonymous $yQ5BfQaAxy

https://www.theregister.co.uk/2020/01/27/cisco_webex_bug_let_anyone_join_a_passwordprotected_meeting/

Cisco has confessed to a vulnerability in its Webex Meetings Suite sites and Webex Meetings Online sites that allowed an "unauthenticated" attendee sitting on a workstation far, far away to join a "password-protected meeting without providing the meeting password".

According to the security advisory, which was rated as "High": "The vulnerability is due to unintended meeting information exposure in a specific meeting join flow for mobile applications."