CVE-2014-2199

Опубликовано: 20 мая 2014

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

meetinginfo.do in Cisco WebEx Event Center, WebEx Meeting Center, WebEx Sales Center, WebEx Training Center, WebEx Meetings Server 1.5(.1.131) and earlier, and WebEx Business Suite (WBS) 27 before 27.32.31.16, 28 before 28.12.13.18, and 29 before 29.5.1.12 allows remote attackers to obtain sensitive meeting information by leveraging knowledge of a meeting identifier, aka Bug IDs CSCuo68624 and CSCue46738.

Ссылки

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2199
Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=34252
Vendor Advisory
http://www.securitytracker.com/id/1030251
Third Party Advisory
VDB Entry
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2199
Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=34252
Vendor Advisory
http://www.securitytracker.com/id/1030251
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cisco:webex_business_suite:27.0:*:*:*:*:*:*:*

cpe:2.3:a:cisco:webex_business_suite:28.0:*:*:*:*:*:*:*

cpe:2.3:a:cisco:webex_business_suite:29.0:*:*:*:*:*:*:*

cpe:2.3:a:cisco:webex_event_center:-:*:*:*:*:*:*:*

cpe:2.3:a:cisco:webex_meeting_center:-:*:*:*:*:*:*:*

cpe:2.3:a:cisco:webex_meetings_server:*:*:*:*:*:*:*:*

Версия до 1.5\(.1.131\) (включая)

cpe:2.3:a:cisco:webex_sales_center:-:*:*:*:*:*:*:*

cpe:2.3:a:cisco:webex_training_center:-:*:*:*:*:*:*:*

EPSS

Процентиль: 59%

0.00378

Низкий

5 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-4fmq-9536-6mrc

github

больше 3 лет назад