Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jrwq-36rx-842c

Опубликовано: 21 мая 2025
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

A vulnerability in client join services of Cisco Webex Meetings could allow an unauthenticated, remote attacker to manipulate cached HTTP responses within the meeting join service.

This vulnerability is due to improper handling of malicious HTTP requests to the affected service. An attacker could exploit this vulnerability by manipulating stored HTTP responses within the service, also known as HTTP cache poisoning. A successful exploit could allow the attacker to cause the Webex Meetings service to return incorrect HTTP responses to clients.

A vulnerability in client join services of Cisco Webex Meetings could allow an unauthenticated, remote attacker to manipulate cached HTTP responses within the meeting join service.

This vulnerability is due to improper handling of malicious HTTP requests to the affected service. An attacker could exploit this vulnerability by manipulating stored HTTP responses within the service, also known as HTTP cache poisoning. A successful exploit could allow the attacker to cause the Webex Meetings service to return incorrect HTTP responses to clients.

EPSS

Процентиль: 3%
0.0002
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-349

Связанные уязвимости

CVSS3: 4.3
nvd
29 дней назад

A vulnerability in client join services of Cisco Webex Meetings could allow an unauthenticated, remote attacker to manipulate cached HTTP responses within the meeting join service. This vulnerability is due to improper handling of malicious HTTP requests to the affected service. An attacker could exploit this vulnerability by manipulating stored HTTP responses within the service, also known as HTTP cache poisoning. A successful exploit could allow the attacker to cause the Webex Meetings service to return incorrect HTTP responses to clients.

CVSS3: 4.3
fstec
29 дней назад

Уязвимость клиентского сервиса программного обеспечения веб-конференцсвязи Cisco Webex Meetings, позволяющая нарушителю оказать воздействие на целостность защищаемой информации

EPSS

Процентиль: 3%
0.0002
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-349