CVE-2021-1467

Cisco Webex Meetings for Android Avatar Modification Vulnerability

State
Published
Severity
4.3 Medium
Published
Apr 8, 2021
Updated
Nov 8, 2024
Reserved
Nov 13, 2020

Read the record on cve.org

Description

A vulnerability in Cisco Webex Meetings for Android could allow an authenticated, remote attacker to modify the avatar of another user. This vulnerability is due to improper authorization checks. An attacker could exploit this vulnerability by sending a crafted request to the Cisco Webex Meetings client of a targeted user of a meeting in which they are both participants. A successful exploit could allow the attacker to modify the avatar of the targeted user.

Scores

CVSSScoreVectorSource
3.14.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:Ncisco

Weaknesses

Affected Products

ProductVersions
Cisco Webex MeetingsCisco
  • n/aAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.