medium5.0
CVE-2014-2199
meetinginfo.do in Cisco WebEx Event Center, WebEx Meeting Center, WebEx Sales Center, WebEx Training Center, WebEx Meetings Server 1.5(.1.131) and earlier, and…
Impact
meetinginfo.do in Cisco WebEx Event Center, WebEx Meeting Center, WebEx Sales Center, WebEx Training Center, WebEx Meetings Server 1.5(.1.131) and earlier, and WebEx Business Suite (WBS) 27 before 27.32.31.16, 28 before 28.12.13.18, and 29 before 29.5.1.12 allows remote attackers to obtain sensitive meeting information by leveraging knowledge of a meeting identifier, aka Bug IDs CSCuo68624 and CSCue46738.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Webex Business Suite | Versions 27.0, 28.0, 29.0 |
| Cisco | Webex Event Center | All versions |
| Cisco | Webex Meeting Center | All versions |
| Cisco | Webex Meetings Server | through 1.5\(.1.131\) |
| Cisco | Webex Sales Center | All versions |
| Cisco | Webex Training Center | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2199
- http://tools.cisco.com/security/center/viewAlert.x?alertId=34252
- http://www.securitytracker.com/id/1030251
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2199
- http://tools.cisco.com/security/center/viewAlert.x?alertId=34252
- http://www.securitytracker.com/id/1030251