EUVD-2015-7247

Malware in sbrugna...

Zoom Fixed Flaw Opening Meetings to Hackers

NEW ORLEANS – Enterprise video conferencing firm Zoom has issued a bevy of security fixes after researchers said the company’s platform used weak authentication that made it possible for adversaries to join active meetings. The issue stems from Zoom’s conference meetings not requiring a “meeting...

Code injection

The Secure Meeting Pulse Collaboration in Pulse Connect Secure formerly Juniper Junos Pulse before 7.1R22.1, 7.4, 8.0 before 8.0R11, and 8.1 before 8.1R3 provides different messages for attempts to join a meeting depending on the status of the meeting, which allows remote attackers to enumerate...

PT-2013-1311

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meetings Server versions prior to 1.1 Description The issue is related to insufficient entropy in meeting IDs, which can be exploited by remote attackers to bypass authentication and join arbitrary meetings without a password. This...