CVE-2019-1948
Last modified
CVE-2019-1948 is a medium-severity vulnerability rated 5.9/10 on the CVSS scale. A vulnerability in Cisco Webex Meetings Mobile (iOS) could allow an unauthenticated, remote attacker to gain unauthorized read access to sensitive data by using an invalid Secure Sockets Layer (SSL) certificate. The vulnerability is due to insufficient SSL certificate validation by the affected software. EPSS estimates a 0.87% chance of exploitation in the next 30 days.
Description
A vulnerability in Cisco Webex Meetings Mobile (iOS) could allow an unauthenticated, remote attacker to gain unauthorized read access to sensitive data by using an invalid Secure Sockets Layer (SSL) certificate. The vulnerability is due to insufficient SSL certificate validation by the affected software. An attacker could exploit this vulnerability by supplying a crafted SSL certificate to an affected device. A successful exploit could allow the attacker to conduct man-in-the-middle attacks to decrypt confidential information on user connections to the affected software.
Metrics
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Webex Meetings | >= 11.3, <= 39.5 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2019-1948?
How severe is CVE-2019-1948?
How do I fix CVE-2019-1948?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2019
- CVE-2019-19468Free Photo Viewer 1.3 allows remote attackers to execute arb…7.8
- CVE-2019-19469In Zmanda Management Console 3.3.9, ZMC_Admin_Advanced?form=…8.8
- CVE-2019-1947A vulnerability in the email message filtering feature of Ci…8.6
- CVE-2019-19470Unsafe usage of .NET deserialization in Named Pipe message p…7.8
- CVE-2019-19475An issue was discovered in ManageEngine Applications Manager…8.8
- CVE-2019-19479An issue was discovered in OpenSC through 0.19.0 and 0.20.x …5.5
- CVE-2019-19480An issue was discovered in OpenSC through 0.19.0 and 0.20.x …4.6
- CVE-2019-19481An issue was discovered in OpenSC through 0.19.0 and 0.20.x …4.6
- CVE-2019-19484Open redirect via parameter ‘p’ in login.php in Centreon (19…6.1
- CVE-2019-19486Local File Inclusion in minPlayCommand.php in Centreon (19.0…6.5
- CVE-2019-19487Command Injection in minPlayCommand.php in Centreon (19.04.4…8.8
- CVE-2019-19489SMPlayer 19.5.0 has a buffer overflow via a long .m3u file.5.5
Are you affected by CVE-2019-1948?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST