Cisco Patches Webex Bugs Following Exposure of German Government Meetings


On June 4, Cisco issued a security advisory following a report by Zeit Online about vulnerabilities in the German government’s Cisco Webex implementation that could expose sensitive meeting information. Researchers identified an insecure direct object reference (IDOR) vulnerability allowing access to meeting links by modifying link numbers, exposing details of meetings and unprotected personal meeting rooms of high-ranking officials. The German government blocked access and took Webex offline, while Cisco released patches to fix the issue and notified affected customers.

Read More…