Cisco WebEx Meetings Server Elevated Privileges Vulnerability

Last Update Date: 30 Jan 2014 14:39 Release Date: 30 Jan 2014 4227 Views

RISK: Medium Risk

TYPE: Servers - Other Servers

A vulnerability has been identified in WebEx Meetings Server. A remote authenticated user can gain elevated privileges.

A remote authenticated user can send a specially crafted URL to join meetings they are not authorized to attend or to end meetings for which they are not the host.

Note: Vendor patch is currently unavailable.

Impact

Elevation of Privilege

System / Technologies affected

Cisco WebEx Meetings Server

Solutions

Note: Vendor patch is currently unavailable.

Vulnerability Identifier

CVE-2014-0682

Source

SecurityTracker