Vulnerabilities in Cisco Webex Could Covertly Eavesdrop on Meetings
An attacker could remain in the meeting as a ghost user and listen to audio even after being dropped from the conference. Cisco has patched three vulnerabilities (CVE-2020-3441, CVE-2020-3471, and CVE-2020-3419) in the Webex video conferencing application, exploitation of which allows attackers to join a meeting and eavesdrop on conversations as a “ghost user” invisible to other participants.
