Lucene search

[email protected]CVE-2017-3880

HistoryMar 17, 2017 - 10:59 p.m.

CVE-2017-3880

2017-03-1722:59:00

CWE-287

[email protected]

web.nvd.nist.gov

cisco

webex

meetings

server

authentication bypass

vulnerability

cve-2017-3880

nvd

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.9%

JSON

An Authentication Bypass vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to access limited meeting information on the Cisco WebEx Meetings Server. More Information: CSCvd50728. Known Affected Releases: 2.6 2.7 2.8 CWMS-2.5MR1 Orion1.1.2.patch T29_orion_merge.

Affected configurations

NVD

Node

ciscowebex_meetings_serverMatch2.5.1.5

ciscowebex_meetings_serverMatch2.5.1.29

ciscowebex_meetings_serverMatch2.5.99.2

ciscowebex_meetings_serverMatch2.5_base

ciscowebex_meetings_serverMatch2.5_mr1

ciscowebex_meetings_serverMatch2.5_mr2

ciscowebex_meetings_serverMatch2.5_mr2patch_1

ciscowebex_meetings_serverMatch2.5_mr3

ciscowebex_meetings_serverMatch2.5_mr4

ciscowebex_meetings_serverMatch2.5_mr5

ciscowebex_meetings_serverMatch2.5_mr5patch_1

ciscowebex_meetings_serverMatch2.5_mr6

ciscowebex_meetings_serverMatch2.5_mr6patch_1

ciscowebex_meetings_serverMatch2.5_mr6patch_2

ciscowebex_meetings_serverMatch2.5_mr6patch_3

ciscowebex_meetings_serverMatch2.5_mr6patch_4

ciscowebex_meetings_serverMatch2.6.0

ciscowebex_meetings_serverMatch2.6.1.39

ciscowebex_meetings_serverMatch2.6_mr1

ciscowebex_meetings_serverMatch2.6_mr1patch_1

ciscowebex_meetings_serverMatch2.6_mr2

ciscowebex_meetings_serverMatch2.6_mr2patch_1

ciscowebex_meetings_serverMatch2.6_mr3

ciscowebex_meetings_serverMatch2.6_mr3patch_1

ciscowebex_meetings_serverMatch2.6_mr3patch_2

ciscowebex_meetings_serverMatch2.7.1

ciscowebex_meetings_serverMatch2.7_base

ciscowebex_meetings_serverMatch2.7_mr1

ciscowebex_meetings_serverMatch2.7_mr1patch_1

ciscowebex_meetings_serverMatch2.7_mr2

ciscowebex_meetings_serverMatch2.7_mr2patch_1

CPENameOperatorVersion
cisco:webex_meetings_servercisco webex meetings servereq2.5.1.5
cisco:webex_meetings_servercisco webex meetings servereq2.5.1.29
cisco:webex_meetings_servercisco webex meetings servereq2.5.99.2
cisco:webex_meetings_servercisco webex meetings servereq2.5_base
cisco:webex_meetings_servercisco webex meetings servereq2.5_mr1
cisco:webex_meetings_servercisco webex meetings servereq2.5_mr2
cisco:webex_meetings_servercisco webex meetings servereq2.5_mr3
cisco:webex_meetings_servercisco webex meetings servereq2.5_mr4
cisco:webex_meetings_servercisco webex meetings servereq2.5_mr5
cisco:webex_meetings_servercisco webex meetings servereq2.5_mr6

CPE	Name	Operator	Version
cisco:webex_meetings_server	cisco webex meetings server	eq	2.5.1.5
cisco:webex_meetings_server	cisco webex meetings server	eq	2.5.1.29
cisco:webex_meetings_server	cisco webex meetings server	eq	2.5.99.2
cisco:webex_meetings_server	cisco webex meetings server	eq	2.5_base
cisco:webex_meetings_server	cisco webex meetings server	eq	2.5_mr1
cisco:webex_meetings_server	cisco webex meetings server	eq	2.5_mr2
cisco:webex_meetings_server	cisco webex meetings server	eq	2.5_mr3
cisco:webex_meetings_server	cisco webex meetings server	eq	2.5_mr4
cisco:webex_meetings_server	cisco webex meetings server	eq	2.5_mr5
cisco:webex_meetings_server	cisco webex meetings server	eq	2.5_mr6

Rows per page:

1-10 of 191

CNA Affected

[
  {
    "product": "Cisco WebEx Meetings Server",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Cisco WebEx Meetings Server"
      }
    ]
  }
]

References

www.securityfocus.com/bid/96918

www.securitytracker.com/id/1038040

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-webex

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.9%

JSON

Related for CVE-2017-3880

prion1 cvelist1 nvd1 cisco1