Information disclosure in Cisco Webex Business Suite
CVE-2014-2199
meetinginfo.do in Cisco WebEx Event Center, WebEx Meeting Center, WebEx Sales Center, WebEx Training Center, WebEx Meetings Server 1.5(.1.131) and earlier, and WebEx Business Suite (WBS) 27 before 27.32.31.16, 28 before 28.12.13.18, and 29 before 29.5.1.12 allows remote attackers to obtain sensitive meeting information by leveraging knowledge of a meeting identifier, aka Bug IDs CSCuo68624 and CSCue46738.
Vulnerability class: Information Disclosure
EPSS: 0.017 (74.9th percentile) — read the EPSS interpretation.
Affected products
- Cisco Webex_business_suite — versions 27.0, 28.0, 29.0
- Cisco Webex_event_center
- Cisco Webex_meeting_center
- Cisco Webex_meetings_server
- Cisco Webex_sales_center
- Cisco Webex_training_center
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CONFIRM, Vendor Advisory)
- psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)