QID 375576

Date Published: 2022-06-13

QID 375576: Cisco Webex Meetings Desktop App and Webex Productivity Tools for Windows Shared Memory Information Disclosure Vulnerability(cisco-sa-wda-pt-msh-6LWOcZ5)

A vulnerability in Cisco Webex Meetings Desktop App and Webex Productivity Tools for Windows
could allow an authenticated, local attacker to
gain access to sensitive information on an affected system.

Affected Products
Cisco Webex Meetings Desktop App and Cisco Webex Productivity Tools releases earlier than releases 40.6 when they are running on a Microsoft Windows end-user system.

QID Detection Logic (Authenticated):
The QID checks for vulnerable version of Cisco Webex Meetings Desktop App and Cisco Webex Productivity Tools by checking the version and buildnumber respectively.

A successful exploit could allow the attacker to retrieve sensitive information from the shared memory,
including usernames, meeting information, or authentication tokens.

  • CVSS V3 rated as Medium - 5.5 severity.
  • CVSS V2 rated as Low - 2.1 severity.
    • Solution

    Customers are advised to refer to cisco-sa-wda-pt-msh-6LWOcZ5 for more information.

    Vendor References

    CVEs related to QID 375576

    CVE-2021-1372 |
    Software Advisories
    Advisory ID Software Component Link
    cisco-sa-wda-pt-msh-6LWOcZ5 URL Logo tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wda-pt-msh-6LWOcZ5
    By selecting these links, you may be leaving CVEreport webspace. We have provided these links to other websites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other websites that are more appropriate for your purpose. CVEreport does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, CVEreport does not endorse any commercial products that may be mentioned on these sites. Please address comments about any linked pages to [email protected].