CVE-2024-20395 Information disclosure in Cisco Webex Teams
An adjacent attacker can capture session tokens from insecure media requests, potentially allowing them to impersonate the targeted user.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2024-20395?
CVE-2024-20395 is a medium-severity vulnerability in Cisco Webex Teams, published on 17 Jul 2024. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
A vulnerability in the media retrieval functionality of Cisco Webex App could allow an unauthenticated, adjacent attacker to gain access to sensitive session information. This vulnerability is due to insecure transmission of requests to backend services when the app accesses embedded media, such as images. An attacker could exploit this vulnerability by sending a message with embedded media that is stored on a messaging server to a targeted user. If the attacker can observe transmitted traffic in a privileged network position, a successful exploit could allow the attacker to capture session token information from insecurely transmitted requests and possibly reuse the captured session information to take further actions as the targeted user.
Weakness: CWE-523
Which versions are affected by CVE-2024-20395?
It affects 1 product.
Products include Cisco Webex Teams.
How do I fix CVE-2024-20395?
No fix has been published for CVE-2024-20395 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-20395 being exploited?
There is no known exploitation of CVE-2024-20395 in the wild and no public exploit code.
Other vulnerabilities in Cisco Webex Teams
- CVE-2025-20236 Cisco Webex App Client-Side Remote Code Execution Vulnerability
- CVE-2018-0387 Code injection in Cisco Webex Teams unknown
- CVE-2018-0436 Cisco Webex Teams Information Disclosure and Modification Vulnerability
- CVE-2020-3535 Cisco Webex Teams Client for Windows DLL Hijacking Vulnerability
- CVE-2019-1636 Cisco Webex Teams URI Handler Insecure Library Loading Vulnerability
Sources
Also known as GHSA-28jg-69qr-j99g.