—–BEGIN PGP SIGNED MESSAGE—–
Hash: SHA256
===========================================================================
AUSCERT External Security Bulletin Redistribution
ESB-2023.3817
Cisco Webex Meetings Web UI Vulnerabilities
6 July 2023
===========================================================================
AusCERT Security Bulletin Summary
———————————
Product: Cisco Webex Meetings
Publisher: Cisco Systems
Operating System: Cisco
Resolution: Patch/Upgrade
CVE Names: CVE-2023-20180 CVE-2023-20133
Original Bulletin:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sxsscsrf-2L24bBx6
Comment: CVSS (Max): 5.4 CVE-2023-20133 (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
CVSS Source: Cisco Systems
Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
– ————————–BEGIN INCLUDED TEXT——————–
Cisco Webex Meetings Web UI Vulnerabilities
Priority: Medium
Advisory ID: cisco-sa-sxsscsrf-2L24bBx6
First Published: 2023 July 5 16:00 GMT
Version 1.0: Final
Workarounds: No workarounds available
Cisco Bug IDs: CSCwe38545 CSCwe64524
CVE Names: CVE-2023-20133 CVE-2023-20180
Summary
o Multiple vulnerabilities in the web UI of Cisco Webex Meetings could allow
a remote attacker to conduct stored cross-site scripting (XSS) or
cross-site request forgery (CSRF) attacks.
For more information about these vulnerabilities, see the Details section
of this advisory.
Cisco has released software updates that address these vulnerabilities.
There are no workarounds that address these vulnerabilities.
This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sxsscsrf-2L24bBx6
Affected Products
o Vulnerable Products
These vulnerabilities affect Cisco Webex Meetings, which is cloud based.
Products Confirmed Not Vulnerable
Only products listed in the Vulnerable Products section of this advisory
are known to be affected by these vulnerabilities.
Details
o The vulnerabilities are not dependent on one another. Exploitation of one
of the vulnerabilities is not required to exploit the other vulnerability.
In addition, a software release that is affected by one of the
vulnerabilities may not be affected by the other vulnerability.
Details about the vulnerabilities are as follows:
CVE-2023-20133: Cisco Webex Meetings Stored Cross-Site Scripting
Vulnerability
A vulnerability in the web UI of Cisco Webex Meetings could allow an
authenticated, remote attacker to conduct a stored XSS attack against a
user.
This vulnerability is due to insufficient validation of user-supplied input
in Webex Events (classic) programs, email templates, and survey questions.
An attacker could exploit this vulnerability by persuading a user to click
a malicious link. A successful exploit could allow the attacker to execute
arbitrary script code in the context of the affected interface or access
sensitive, browser-based information.
Cisco has released software updates that address this vulnerability. There
are no workarounds that address this vulnerability.
Bug ID(s): CSCwe38545
CVE ID: CVE-2023-20133
Security Impact Rating (SIR): Medium
CVSS Base Score: 5.4
CVSS Vector:CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CVE-2023-20180: Cisco Webex Meetings Cross-Site Request Forgery
Vulnerability
A vulnerability in the web UI of Cisco Webex Meetings could allow an
unauthenticated, remote attacker to conduct a CSRF attack against a user.
This vulnerability is due to insufficient CSRF protections for the web
interface on an affected system. An attacker could exploit this
vulnerability by persuading a user to click a malicious link. A successful
exploit could allow the attacker to perform arbitrary actions in the
context of the affected interface with the privileges of the targeted user.
These actions could include joining meetings or assistance sessions, create
a test, schedule a training session, and modify a meeting registration
form.
Cisco has released software updates that address this vulnerability. There
are no workarounds that address this vulnerability.
Bug ID(s): CSCwe64524
CVE ID: CVE-2023-20180
Security Impact Rating (SIR): Medium
CVSS Base Score: 4.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Workarounds
o There are no workarounds that address these vulnerabilities.
Fixed Software
o Cisco has addressed these vulnerabilities in Cisco Webex Meetings, which is
cloud based. No user action is required.
Customers who need additional information are advised to contact the Cisco
Technical Assistance Center (TAC) or their contracted maintenance
providers.
Exploitation and Public Announcements
o The Cisco Product Security Incident Response Team (PSIRT) is not aware of
any public announcements or malicious use of the vulnerabilities that are
described in this advisory.
Source
o Cisco would like to thank the external researcher who reported these
vulnerabilities.
Cisco Security Vulnerability Policy
o To learn about Cisco security vulnerability disclosure policies and
publications, see the Security Vulnerability Policy . This document also
contains instructions for obtaining fixed software and receiving security
vulnerability information from Cisco.
Subscribe to Cisco Security Notifications
o Subscribe
Related to This Advisory
o Cross-Site Scripting
URL
o https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sxsscsrf-2L24bBx6
Revision History
o +———-+—————————+———-+——–+————–+
| Version | Description | Section | Status | Date |
+———-+—————————+———-+——–+————–+
| 1.0 | Initial public release. | – | Final | 2023-JUL-05 |
+———-+—————————+———-+——–+————–+
Legal Disclaimer
o THIS DOCUMENT IS PROVIDED ON AN “AS IS” BASIS AND DOES NOT IMPLY ANY KIND
OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR
FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT
OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES
THE RIGHT TO CHANGE OR UPDATE THIS DOCUMENT AT ANY TIME.
A standalone copy or paraphrase of the text of this document that omits the
distribution URL is an uncontrolled copy and may lack important information
or contain factual errors. The information in this document is intended for
end users of Cisco products.
– ————————–END INCLUDED TEXT——————–
You have received this e-mail bulletin as a result of your organisation’s
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to [email protected]
and we will forward your request to the appropriate person.
NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT’s members. As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation’s
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.
NOTE: This is only the original release of the security bulletin. It may
not be updated when updates to the original are made. If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author’s website to ensure that the information is still current.
Contact information for the authors of the original document is included
in the Security Bulletin above. If you have any questions or need further
information, please contact them directly.
Previous advisories and external security bulletins can be retrieved from:
https://www.auscert.org.au/bulletins/
===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072
Internet Email: [email protected]
Facsimile: (07) 3365 7031
Telephone: (07) 3365 4417 (International: +61 7 3365 4417)
AusCERT personnel answer during Queensland business hours
which are GMT+10:00 (AEST).
On call after hours for member emergencies only.
===========================================================================
—–BEGIN PGP SIGNATURE—–
Comment: https://auscert.org.au/gpg-key/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=9czE
—–END PGP SIGNATURE—–
Source: Read More
Security Bulletins