A vulnerability in the reclaim host role feature of Cisco Webex Meetings and Cisco Webex Meetings Server could allow an authenticated, remote attacker to take over the host role during a meeting. This vulnerability is due to a lack of protection against brute forcing of the host key. An attacker could exploit this vulnerability by sending crafted requests to a vulnerable Cisco Webex Meetings or Webex Meetings Server site. A successful exploit would require the attacker to have access to join a Webex meeting, including applicable meeting join links and passwords. A successful exploit could allow the attacker to acquire or take over the host role for a meeting.
Metrics
Affected Vendors & Products
References
History
Tue, 12 Nov 2024 21:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
MITRE
Status: PUBLISHED
Assigner: cisco
Published: 2021-01-13T21:46:00.187518Z
Updated: 2024-11-12T20:39:39.193Z
Reserved: 2020-11-13T00:00:00
Link: CVE-2021-1311
Vulnrichment
Updated: 2024-08-03T16:02:56.395Z
NVD
Status : Modified
Published: 2021-01-13T22:15:21.630
Modified: 2024-11-21T05:44:03.993
Link: CVE-2021-1311
Redhat
No data.