Cisco WebEx Meeting Server Information Disclosure Vulnerability

Last Update Date: 26 Jun 2014 Release Date: 24 Jun 2014 3822 Views

RISK: Medium Risk

TYPE: Servers - Other Servers

A vulnerability was identified in Cisco WebEx Meeting Server, which could be exploited by an authenticated, remote attacker to access sensitive information.

An attacker could send a crafted URL request to a vulnerable device to disclose the meeting information.

Impact

Information Disclosure

System / Technologies affected

Version 1.5

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

The vendor has issued a fix.
https://tools.cisco.com/bugsearch/bug/CSCum03527

Vulnerability Identifier

CVE-2014-3296

Source

AusCERT
Cisco