Untrusted Search Path Vulnerability in Cisco WebEx Productivity Tools
CVE-2016-4349

7.8HIGH

Key Information:

Vendor
Cisco
Status
Webex Productivity Tools
Vendor
CVE Published:
28 April 2016

Summary

A vulnerability in Cisco WebEx Productivity Tools allows local users to exploit an untrusted search path to gain elevated privileges. By introducing a Trojan horse DLL file in the current working directory, users can manipulate the application into loading these malicious files. This impacts the integrity and security of the WebEx Productivity Tools, presenting risks for local user accounts.

References

https://www.solutionary.com/threat-intelligence/vulnerabi...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.