Cisco Meeting Management REST API Privilege Escalation Vulnerability

A vulnerability exists in the REST API of Cisco Meeting Management, allowing remote, authenticated attackers with low privileges to elevate their privileges to administrator level on affected devices. This issue arises because proper authorization is not enforced for REST API users. Exploitation involves sending API requests to a specific endpoint, which could result in gaining administrator control over edge nodes managed by Cisco Meeting Management.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing attackers to gain administrator-level control on affected devices.

Remediation

Cisco has released software updates that address this vulnerability. For Cisco Meeting Management versions 3.8 and earlier, users should migrate to a fixed release. For version 3.9, users should upgrade to 3.9.1. Version 3.10 is not vulnerable.