CVE-2021-1467
Cisco Webex Meetings for Android Avatar Modification Vulnerability
- State
- Published
- Severity
- 4.3 Medium
- Published
- Apr 8, 2021
- Updated
- Nov 8, 2024
- Reserved
- Nov 13, 2020
Description
A vulnerability in Cisco Webex Meetings for Android could allow an authenticated, remote attacker to modify the avatar of another user. This vulnerability is due to improper authorization checks. An attacker could exploit this vulnerability by sending a crafted request to the Cisco Webex Meetings client of a targeted user of a meeting in which they are both participants. A successful exploit could allow the attacker to modify the avatar of the targeted user.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 4.3 Medium | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N | cisco |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
Cisco Webex MeetingsCisco |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.