CVE-2021-1467CWE-284

Cisco Webex Meetings for Android Avatar Modification Vulnerability

Medium · published April 8, 2021

CVSS v3.1
4.3
EPSS
1%
Percentile
54.3
In the wild
Unconfirmed
What it is

A vulnerability in Cisco Webex Meetings for Android could allow an authenticated, remote attacker to modify the avatar of another user. This vulnerability is due to improper authorization checks. An attacker could exploit this vulnerability by sending a crafted request to the Cisco Webex Meetings client of a targeted user of a meeting in which they are both participants. A successful exploit could allow the attacker to modify the avatar of the targeted user.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00745 · 54.3th percentile
Weakness
CWE-284 · Improper Access Control
Published
2021-04-08T04:06Z
EPSS history
Timeline
  • 08 APR 04:06Z
    Cisco Webex Meetings for Android Avatar Modification Vulnerability
    cvelistv5