LIVE CHAT BLOG #2: CISCO WEBEX CONNECT - ACCESS TO MILLIONS OF CHATS HISTORIES

Summary from the TLDR InfoSec newsletter

A vulnerability was discovered in Cisco's Webex Chat that allowed unauthorized access to the chat histories of many organizations, including internal and customer-facing help desks. The flaw was related to the use of the clientKey as a secretKey in API calls, which allowed attackers to read chat histories by exploiting specific parameters. The issue was reported to Cisco in July 2024 and patches were released to address the security vulnerability.