Published: 01/08/2014 Updated: 29/08/2017

CVSS v2 Base Score: 5.8 | Impact Score: 4.9 | Exploitability Score: 8.6

VMScore: 516

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N

user.php in Cisco WebEx Meetings Server 1.5(.1.131) and previous versions does not properly implement the token timer for authenticated encryption, which allows remote malicious users to obtain sensitive information via a crafted URL, aka Bug ID CSCuj81708.

Vulnerable Product	Search on Vulmon	Subscribe to Product
cisco webex meetings server 1.5
cisco webex meetings server
cisco webex meetings server 1.5\\(.1.6\\)

A vulnerability in the userphp script of Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to view sensitive information The vulnerability is due to an invalid token timer An attacker could exploit this vulnerability by submitting crafted URL requests to a vulnerable device Cisco has confirmed the vulnerability in a ...

CWE-310 http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3302 http://tools.cisco.com/security/center/viewAlert.x?alertId=35050 http://www.securitytracker.com/id/1030646 http://www.securityfocus.com/bid/68904 http://secunia.com/advisories/58624 https://exchange.xforce.ibmcloud.com/vulnerabilities/94892 https://nvd.nist.gov http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20140725-CVE-2014-3302

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2014-3302

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect