CVE-2021-1467 MEDIUM

CVE-2021-1467: Cisco Webex Meetings for Android Avatar Modification Vulnerability

Vendor Cisco
Product Cisco Webex Meetings
Weakness CWE-284
Published April 8, 2021
Last update November 8, 2024

CVSS base score

4.3/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

What the vulnerability does

01Description

A vulnerability in Cisco Webex Meetings for Android could allow an authenticated, remote attacker to modify the avatar of another user. This vulnerability is due to improper authorization checks. An attacker could exploit this vulnerability by sending a crafted request to the Cisco Webex Meetings client of a targeted user of a meeting in which they are both participants. A successful exploit could allow the attacker to modify the avatar of the targeted user.

Key dates

02Disclosure timeline

April 8, 2021 CVE published
November 8, 2024 Record updated