Cisco Webex Meetings HTTP Cache Poisoning Vulnerability

A vulnerability exists in the client join services of Cisco Webex Meetings, allowing an unauthenticated, remote attacker to manipulate cached HTTP responses within the meeting join service. This issue arises from improper handling of malicious HTTP requests, leading to HTTP cache poisoning. Exploitation of this vulnerability could cause the Webex Meetings service to deliver incorrect HTTP responses to clients.

Impact

Exploitation of this vulnerability could result in HTTP cache poisoning, allowing the attacker to manipulate cached responses that the Webex Meetings service sends to clients.

Remediation

Cisco has addressed this vulnerability in the cloud-based Webex Meetings service. No user action is required, and there are no workarounds available.