CVE-2024-20395: 
Cisco Webex Teams vulnerability analysis and mitigation

A vulnerability in the media retrieval functionality of Cisco Webex App (CVE-2024-20395) could allow an unauthenticated, adjacent attacker to gain access to sensitive session information. The vulnerability was discovered and disclosed on July 17, 2024, affecting the Cisco Webex App platform. This security flaw stems from insecure transmission of requests to backend services when the app accesses embedded media, such as images (Cisco Advisory).

The vulnerability is classified under CWE-523 (Unprotected Transport of Credentials) with a CVSS v3.1 Base Score of 6.4 (Medium). The attack vector is adjacent (AV:A), requiring high attack complexity (AC:H), with no privileges required (PR:N), and user interaction (UI:R). The scope is unchanged (S:U), with high impacts on confidentiality and integrity (C:H, I:H) but no impact on availability (A:N) (Cisco Advisory).

A successful exploitation of this vulnerability could allow an attacker to capture session token information from insecurely transmitted requests and potentially reuse the captured session information to take further actions as the targeted user (Cisco Advisory).

The vulnerability can be exploited by sending a message with embedded media that is stored on a messaging server to a targeted user. The attacker must be in a privileged network position to observe transmitted traffic. The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of this vulnerability (Cisco Advisory).

Cisco has released software updates that address this vulnerability through the Cisco Webex service, which is cloud-based. No customer action is necessary to get these software updates as they are automatically deployed. There are no workarounds available that address this vulnerability (Cisco Advisory).

The vulnerability was reported by Maxime Escourbiac of CERT Michelin and Yassine Bengana of Abicom (Cisco Advisory).