Cisco Webex Meetings Desktop App and Webex Productivity Tools for Windows Shared Memory Information Disclosure Vulnerability

Vulnerability

Cisco Webex Meetings Desktop App and Webex Productivity Tools for Windows contain an information disclosure vulnerability due to unsafe usage of shared memory [1]. Affected versions include releases earlier than 40.6 and 40.10 for the standalone applications, and releases included with Cisco Webex Meeting Server earlier than Release 4.0MR3 SP4 [1]. The vulnerability allows any process with access to system memory to read shared memory regions used by the Webex software [1].

Exploitation

An attacker must have valid credentials on a Microsoft Windows end-user system and must log in after another user has already authenticated with Webex on the same system [1]. The attacker then runs an application designed to read shared memory, which can retrieve sensitive data stored there [1]. No additional privileges or user interaction beyond local access are required [1].

Impact

Successful exploitation allows the attacker to retrieve sensitive information from shared memory, including usernames, meeting information, and authentication tokens [1]. This could lead to further compromise of the affected user's Webex account or exposure of confidential meeting details [1].

Mitigation

Cisco has released software updates to address this vulnerability: versions 40.6 and 40.10 for Webex Meetings Desktop App and Webex Productivity Tools, and Release 4.0MR3 SP4 for Cisco Webex Meeting Server [1]. No workarounds are available [1]. Users should upgrade to the fixed releases as soon as possible [1].