CVE-2026-76379: The application stores sensitive information in cleartext within a resource that might be accessible to another control sphere. in Splunk Cisco Webex app for Splunk SOAR

In Cisco Webex app for Splunk SOAR versions >=2.2 and <2.2.1, the schedule meeting action exposes the meeting password in cleartext within the user interface. This happens because the password parameter is not marked as a password field, allowing any user with action execution permissions to view sensitive meeting credentials. The vulnerability is limited to information disclosure and does not affect integrity or availability.

The vulnerability results in the disclosure of sensitive meeting passwords to users who have permission to run actions in the app. This could lead to unauthorized access to meetings if those passwords are used elsewhere. There is no indication of impact on data integrity or system availability.

Upgrade to version 2.2.1 or later of the Cisco Webex app for Splunk SOAR, where this issue is fixed by masking the password parameter. Since the vulnerability is addressed in 2.2.1, applying this official fix is the recommended remediation.