CVE:CVE-2020-3361
CNNVD:CNNVD-202006-1171
Cisco WebEx Meetings Server（CWMS）和Cisco Webex Meetings都是美国思科（Cisco）公司的产品。Cisco WebEx Meetings Server是WebEx会议方案中的一套包含音频、视频和Web会议的多功能会议解决方案。Cisco Webex Meetings是一套视频会议解决方案。
Cisco Webex Meetings和Cisco Webex Meetings Server中存在授权问题漏洞，该漏洞源于程序没有正确处理身份验证令牌。远程攻击者可借助特制请求利用该漏洞获取另一个用户权限。以下产品及版本受到影响：Cisco Webex Meetings sites releases WBS 39.5.25及之前版本，WBS 40.4.10及之前版本，release WBS 40.6.0版本；Cisco Webex Meetings Server releases 4.0MR3及之前版本。
solution:Upgrade cisco webex_meetings to a higher version than 39.5.25,40.4.10,40.6.0,and avoid the version (,39.5.25],[40.1.0,40.4.10],40.6.0; Upgrade cisco webex_meetings_server to a higher version than 4.0,4.0,4.0:maintenance_release1,4.0:maintenance_release2,4.0:maintenance_release3,and avoid the version (,4.0),4.0,4.0:maintenance_release1,4.0:maintenance_release2,4.0:maintenance_release3