What’s Vulnerable › Vulnerabilities

CVE-2021-1544: Cisco Webex Meetings Client Software Logging Information Disclosure Vulnerability

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-06-04 · updated 2026-06-17
• Weakness: CWE-497

Description

A vulnerability in logging mechanisms of Cisco Webex Meetings client software could allow an authenticated, local attacker to gain access to sensitive information. This vulnerability is due to unsafe logging of application actions. An attacker could exploit this vulnerability by logging onto the local system and accessing files containing the logged details. A successful exploit could allow the attacker to gain access to sensitive information, including meeting data and recorded meeting transcriptions.

Affected products

• Cisco Webex Meetings: before 41.4.0 — fixed in 41.4.0

How to fix

Upgrade to a fixed version: Cisco Webex Meetings 41.4.0. Check the vendor advisory for mitigations.

References

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-8fpBnKOz
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-8fpBnKOz

Get alerted when CVE-2021-1544 or the next vulnerability affects your stack