CVE-2015-0589

2015-02-0715:59:06

CWE-20

[email protected]

web.nvd.nist.gov

cisco

webex

meetings server

cve-2015-0589

security

vulnerability

7.5 High

AI Score

Confidence

Low

9 High

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.003 Low

EPSS

Percentile

71.3%

JSON

The administrative web interface in Cisco WebEx Meetings Server 1.0 through 1.5 allows remote authenticated users to execute arbitrary OS commands with root privileges via unspecified fields, aka Bug ID CSCuj40460.

Affected configurations

NVD

Node

ciscowebex_meetings_serverMatch1.0

ciscowebex_meetings_serverMatch1.1

ciscowebex_meetings_serverMatch1.5

CPENameOperatorVersion
cisco:webex_meetings_servercisco webex meetings servereq1.0
cisco:webex_meetings_servercisco webex meetings servereq1.1
cisco:webex_meetings_servercisco webex meetings servereq1.5

CPE	Name	Operator	Version
cisco:webex_meetings_server	cisco webex meetings server	eq	1.0
cisco:webex_meetings_server	cisco webex meetings server	eq	1.1
cisco:webex_meetings_server	cisco webex meetings server	eq	1.5