Vulnslist

find the latest Cisco vulnerabilities

CVE-2019-1948

A vulnerability in Cisco Webex Meetings Mobile (iOS) could allow an unauthenticated, remote attacker to gain unauthorized read access to sensitive data by using an invalid Secure Sockets Layer (SSL) certificate. The vulnerability is due to insufficient SSL certificate validation by the affected software. An attacker could exploit this vulnerability by supplying a crafted SSL certificate to an affected device. A successful exploit could allow the attacker to conduct man-in-the-middle attacks to decrypt confidential information on user connections to the affected software.

SeverityMEDIUM
CVSS5.9
CWECWE-295
KEV
Published
Modified

Related Products

Product Advisory
Cisco Nexus Dashboard cisco-sa-20190821-webex-ssl-cert
Cisco IOS Software cisco-sa-20190821-webex-ssl-cert
Cisco Webex Meetings cisco-sa-20190821-webex-ssl-cert
Cisco WebEx Meetings for iOS cisco-sa-20190821-webex-ssl-cert