Full Disclosure mailing list archives
Webex meetings are vulnerable to mitm
From: RDX Guy <rdx.guy () gmail com>
Date: Mon, 24 Jun 2019 08:56:31 -0400
https://pankajupadhyay.in/2019/06/24/webex-meetings-are-vulnerable-to-mitm/ "In my free time, I was looking at some Android applications and noticed that I was able to intercept SSL traffic for Webex Meetings app. When explored it further, I found that Webex Meetings mobile app accepts self-signed certificates. Also there is no certificate pinning enabled. This makes Webex meet app vulnerable to Man in the middle attack. Users of this app, if connected to a public Wi-Fi spot, can be targeted by any person in the same network. If connected to a rogue Wi-Fi hotspot, Wi-Fi provider may have access to the data passed from the app to the server. Malwares on the device can also exploit this vulnerability to intercept any sensitive data while it’s traveling across the wire." _______________________________________________ Sent through the Full Disclosure mailing list https://nmap.org/mailman/listinfo/fulldisclosure Web Archives & RSS: http://seclists.org/fulldisclosure/
Current thread:
- Webex meetings are vulnerable to mitm RDX Guy (Jun 24)