Cisco WebEx Meetings Server Web-based Management Interface HTTP Request redirect

Summaryinfo

A vulnerability was found in Cisco WebEx Meetings Server. It has been declared as critical. The affected element is an unknown function of the component Web-based Management Interface. Executing a manipulation as part of HTTP Request can lead to redirect. The identification of this vulnerability is CVE-2019-1954. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

Detailsinfo

A vulnerability has been found in Cisco WebEx Meetings Server (Unified Communication Software) (version now known) and classified as critical. This vulnerability affects some unknown processing of the component Web-based Management Interface. The manipulation as part of a HTTP Request leads to a redirect vulnerability. The CWE definition for the vulnerability is CWE-601. A web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a Redirect. This simplifies phishing attacks. As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:

A vulnerability in the web-based management interface of Cisco Webex Meetings Server Software could allow an unauthenticated, remote attacker to redirect a user to an undesired web page. The vulnerability is due to improper input validation of the URL parameters in an HTTP request that is sent to an affected device. An attacker could exploit this vulnerability by crafting an HTTP request that could cause the web application to redirect the request to a specified malicious URL. A successful exploit could allow the attacker to redirect a user to a malicious website.

The weakness was shared 08/08/2019 as cisco-sa-20190807-wms-oredirec as confirmed advisory (Website). The advisory is shared for download at tools.cisco.com. This vulnerability was named CVE-2019-1954 since 12/06/2018. The attack can be initiated remotely. No form of authentication is required for a successful exploitation. Successful exploitation requires user interaction by the victim. There are neither technical details nor an exploit publicly available. The MITRE ATT&CK project declares the attack technique as T1204.001.

Upgrading eliminates this vulnerability.

Once again VulDB remains the best source for vulnerability data.

Productinfo

Type

• Unified Communication Software

Vendor

• Cisco

Name

• WebEx Meetings Server

License

• commercial

Website

• Vendor: https://www.cisco.com/

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion