CVE-2021-1517 Cisco Webex Meetings and Webex Meetings Server Multimedia Sharing Security Bypass Vulnerability

Medium 5.0 Published 4 Jun 2021 Updated 7 Nov 2024

Authenticated attackers can bypass security protections in the multimedia viewer to share files without triggering warning dialogs.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2021-1517?

CVE-2021-1517 is a medium-severity vulnerability in Cisco Webex Meetings Online, published on 4 Jun 2021. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

A vulnerability in the multimedia viewer feature of Cisco Webex Meetings and Cisco Webex Meetings Server could allow an authenticated, remote attacker to bypass security protections. This vulnerability is due to unsafe handling of shared content within the multimedia viewer feature. An attacker could exploit this vulnerability by sharing a file through the multimedia viewer feature. A successful exploit could allow the attacker to bypass security protections and prevent warning dialogs from appearing before files are offered to other users.

Weakness: CWE-693

Which versions are affected by CVE-2021-1517?

It affects 2 products.

Products include Cisco Webex Meetings Online, Cisco Webex Meetings Server.

How do I fix CVE-2021-1517?

No fix has been published for CVE-2021-1517 yet. Limit exposure of the affected software until one is available.

Is CVE-2021-1517 being exploited?

There is no known exploitation of CVE-2021-1517 in the wild and no public exploit code.

All Cisco Webex Meetings Online vulnerabilities

Sources

Also known as GHSA-6464-c84h-p8px.