內容 

於 思科 Webex Meetings、思科 Webex Meetings API 及 思科 Webex Meetings Server 發現多個漏洞，遠端使用者可利用這些漏洞，於目標系統洩露敏感資料、跨網站指令碼及繞過保安限制。



  影響 


跨網站指令碼
繞過保安限制
資料洩露




  受影響之系統或技術 


思科 WebEx Meetings API (詳情請參閱相關連結)
思科 WebEx Meetings Server (詳情請參閱相關連結)




  解決方案 

在安裝軟體之前，請先瀏覽供應商之網站，以獲得更多詳細資料。
 

安裝供應商提供的修補程式：
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-auth-token-3vg57A5r
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-infodisc-4tvQzn4
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-info-leak-PhpzB3sG
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-meetings-xss-MX56prER

 



  漏洞識別碼 


  資料來源 


Cisco Security Advisories
AusCERT



  相關連結 

 https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-auth-token-3vg57A5r  
 https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-infodisc-4tvQzn4  
 https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-info-leak-PhpzB3sG  
 https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-meetings-xss-MX56prER  
 http://www.auscert.org.au/bulletins/ESB-2020.4095/  
 http://www.auscert.org.au/bulletins/ESB-2020.4097/