CVE-2020-3419

A vulnerability in Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to join a Webex session without appearing on the participant list. This vulnerability is due to improper handling of authentication tokens by a vulnerable Webex site. An attacker could exploit this vulnerability by sending crafted requests to a vulnerable Cisco Webex Meetings or Cisco Webex Meetings Server site. A successful exploit requires the attacker to have access to join a Webex meeting, including applicable meeting join links and passwords. The attacker could then exploit this vulnerability to join meetings, without appearing in the participant list, while having full access to audio, video, chat, and screen sharing capabilities.

• CWE-913
• CWE-913

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-auth-token-3vg57A5rVendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-auth-token-3vg57A5rVendor Advisory

Published

Nov 18, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-3413A vulnerability in the scheduled meeting template feature of…4.3
• CVE-2020-3414A vulnerability in the packet processing of Cisco IOS XE Sof…8.6
• CVE-2020-3415A vulnerability in the Data Management Engine (DME) of Cisco…8.8
• CVE-2020-3416Multiple vulnerabilities in the initialization routines that…6.7
• CVE-2020-3417A vulnerability in Cisco IOS XE Software could allow an auth…6.7
• CVE-2020-3418A vulnerability in Cisco IOS XE Wireless Controller Software…4.7
• CVE-2020-3420A vulnerability in the web-based management interface of Cis…5.4
• CVE-2020-3421Multiple vulnerabilities in the Zone-Based Firewall feature …7.5
• CVE-2020-3422A vulnerability in the IP Service Level Agreement (SLA) resp…7.5
• CVE-2020-3423A vulnerability in the implementation of the Lua interpreter…6.7
• CVE-2020-3425Multiple vulnerabilities in the web management framework of …8.8
• CVE-2020-3426A vulnerability in the implementation of the Low Power, Wide…9.1