Webex productivity tools update download

WEBEX PRODUCTIVITY TOOLS UPDATE DOWNLOAD SOFTWARE
WEBEX PRODUCTIVITY TOOLS UPDATE DOWNLOAD WINDOWS

This advisory is available at the following link: There are no workarounds that address this vulnerability.

WEBEX PRODUCTIVITY TOOLS UPDATE DOWNLOAD SOFTWARE

While the CVSS Attack Vector metric denotes the requirement for an attacker to have local access, administrators should be aware that in Active Directory deployments, the vulnerability could be exploited remotely by leveraging the operating system remote management tools.Р”В¬isco has released software updates that address this vulnerability. An exploit could allow the attacker to run arbitrary commands with SYSTEM user privileges. An attacker could exploit this vulnerability by invoking the update service command with a crafted argument.

The vulnerability is due to insufficient validation of user-supplied parameters.

WEBEX PRODUCTIVITY TOOLS UPDATE DOWNLOAD WINDOWS

This is also documented in more detail in the article Check for Cisco Webex Productivity Tools Updates for Windows.A vulnerability in the update service of Cisco Webex Meetings Desktop App and Cisco Webex Productivity Tools for Windows could allow an authenticated, local attacker to execute arbitrary commands as a privileged user. Users can update the Cisco Webex Productivity Tools in Microsoft Outlook by selecting Schedule Meeting > More > Check for Updates. This is also documented in the article Update the Cisco Webex Meetings Desktop App. Users can update the Cisco Webex Meetings Desktop App by launching the Cisco Webex Meetings application and clicking the gear icon in the top right of the application window and then choosing the Check for Updates entry from the drop-down list. The application should not be confused with the Cisco Webex Meetings Client, which is the main client application that provides the core functionality to host or attend a Webex meeting.Р”Р„dministrators can update the Cisco Webex Meetings Desktop App or Webex Productivity Tools for their user base by following the instructions available in the document IT Administrator Guide for Mass Deployment of the Cisco Webex Meetings Desktop App and Productivity Tools. With the Cisco Webex Meetings desktop app, you can start and join meetings without going to your Webex site.Р”В¬isco Webex Productivity Tools is an optional companion application that allows users to quickly schedule and join meetings from their desktop without the need to access the Meetings website. This is also documented in the article Check the Cisco Webex Productivity Tools Version for Windows.Р”В¬isco Webex Meetings Desktop App allows easy access to commonly used Webex Meetings controls. A popup window displaying the currently installed release will open. To determine whether a vulnerable release of Cisco Webex Productivity Tools is installed on a Windows machine, right-click the Webex Productivity Tools icon on the Windows taskbar and select About from the menu. This is also documented in the article Check the Cisco Webex Meetings Desktop App Version. To determine whether a vulnerable release of Cisco Webex Meetings Desktop App is installed on a Windows machine, launch the Cisco Webex Meetings application, click the gear icon in the top right of the application window, and choose the About.

This vulnerability affects Cisco Webex Meetings Server Desktop App and Cisco Webex Productivity Tools releases that are included with Cisco Webex Meeting Server releases earlier than Release 4.0MR3 SP4 when they are running on a Microsoft Windows end-user system.Р”Р‡or information about which Cisco software releases are vulnerable, see the Fixed Software section of this advisory. This vulnerability affects Cisco Webex Meetings Desktop App and Cisco Webex Productivity Tools releases earlier than releases 40.6 and 40.10 when they are running on a Microsoft Windows end-user system. Note: To exploit this vulnerability, an attacker must have valid credentials on a Microsoft Windows end-user system and must log in after another user has already authenticated with Webex on the same end-user system.Р”В¬isco has released software updates that address this vulnerability.

A successful exploit could allow the attacker to retrieve sensitive information from the shared memory, including usernames, meeting information, or authentication tokens. An attacker with permissions to view system memory could exploit this vulnerability by running an application on the local system that is designed to read shared memory. This vulnerability is due to the unsafe usage of shared memory by the affected software. A vulnerability in Cisco Webex Meetings Desktop App and Webex Productivity Tools for Windows could allow an authenticated, local attacker to gain access to sensitive information on an affected system.

Webex productivity tools update download