CVE:CVE-2018-0422
CNNVD:CNNVD-201809-255
Cisco Webex Meetings Suite等都是美国思科（Cisco）公司的多功能视频会议解决方案。Webex Meetings client for Windows是一个基于Windows平台的视频会议客户端软件。
基于Windows平台的Cisco Webex Meetings client中的文件夹权限存在权限许可和访问控制漏洞，该漏洞源于程序授予用户读取，写入和执行Webex文件夹中的文件的权限。本地攻击者可利用该漏洞修改本地存储的文件并在目标设备上执行代码。以下产品受到影响：Cisco Webex Meetings Suite (WBS31)；Cisco Webex Meetings Suite (WBS32)；Cisco Webex Meetings Suite (WBS33)；Cisco Webex Meetings；Cisco Webex Meetings Server。
solution:Upgrade cisco webex_meetings_online to a higher version than 1.3.37,t31.20,t31.20.2,and avoid the version (,1.3.37),t31.20,t31.20.2; Upgrade cisco webex_meetings_server to a higher version than 3.0,3.0:mr1,and avoid the version (,3.0],3.0:mr1; Upgrade cisco webex_business_suite_32 to a higher version than 32.15.20,and avoid the version (,32.15.20); Upgrade cisco webex_business_suite_33 to a higher version than 33.4,and avoid the version (,33.4); Upgrade cisco webex_business_suite_31 to a higher version than *