VYPR
← All advisories
High severity8.1NVD Advisory· Published Jun 18, 2020· Updated Jun 17, 2026

CVE-2020-3361

CVE-2020-3361

Description

A vulnerability in Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to gain unauthorized access to a vulnerable Webex site. The vulnerability is due to improper handling of authentication tokens by a vulnerable Webex site. An attacker could exploit this vulnerability by sending crafted requests to a vulnerable Cisco Webex Meetings or Cisco Webex Meetings Server site. If successful, the attacker could gain the privileges of another user within the affected Webex site.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

10
  • Cisco Systems, Inc./Webex Meetings3 versions
    cpe:2.3:a:cisco:webex_meetings:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:cisco:webex_meetings:*:*:*:*:*:*:*:*range: <=39.5.25
    • cpe:2.3:a:cisco:webex_meetings:40.6.0:*:*:*:*:*:*:*
    • (no CPE)
  • Cisco Systems, Inc./Webex Meetings Server7 versions
    cpe:2.3:a:cisco:webex_meetings_server:*:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:a:cisco:webex_meetings_server:*:*:*:*:*:*:*:*range: <4.0
    • cpe:2.3:a:cisco:webex_meetings_server:4.0:-:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings_server:4.0:maintenance_release1:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings_server:4.0:maintenance_release2:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings_server:4.0:maintenance_release3:*:*:*:*:*:*
    • (no CPE)
    • (no CPE)range: n/a

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.