CVE-2014-0708

WebEx Meeting Center in Cisco WebEx Business Suite does not properly compose URLs for HTTP GET requests, which allows remote attackers to obtain sensitive information by reading 1 web-server access logs, 2 web-server Referer logs, or 3 a browser's history, aka Bug ID CSCul98272...

CVE-2014-0708

CVE-2014-0708 affects WebEx Meeting Center in Cisco WebEx Business Suite. The issue arises from improper URL composition for HTTP GET requests, which could allow remote attackers to read sensitive data from server access logs, Referer logs, or a browser history (Bug ID CSCul98272). Root cause: in...

CVE-2014-0708: Exposure of Sensitive Information to an Unauthorized Actor

WebEx Meeting Center in Cisco WebEx Business Suite does not properly compose URLs for HTTP GET requests, which allows remote attackers to obtain sensitive information by reading 1 web-server access logs, 2 web-server Referer logs, or 3 a browser's history, aka Bug ID CSCul98272...

PT-2014-3783

Name of the Vulnerable Software and Affected Versions Cisco WebEx Business Suite affected versions not specified Description The issue concerns the WebEx Meeting Center component in Cisco WebEx Business Suite, which fails to properly compose URLs for HTTP GET requests. This allows remote attacker...

Cisco WebEx Player ATAS32.DLL Remote Code Execution (CVE-2011-4004)

A remote code execution vulnerability has been reported in Cisco WebEx Player. The vulnerability is due to insufficient validation of some values in record Type 0x1F and Type 0xBB while processing WebEx Recording Format WRF files. A remote unauthenticated attacker can leverage this vulnerability ...

CVE-2014-0682

Cisco WebEx Meetings Server allows remote authenticated users to bypass authorization checks and 1 join arbitrary meetings, or 2 terminate a meeting without having a host role, via a crafted URL, aka Bug ID CSCuj42346...

Authorization

Cisco WebEx Meetings Server allows remote authenticated users to bypass authorization checks and 1 join arbitrary meetings, or 2 terminate a meeting without having a host role, via a crafted URL, aka Bug ID CSCuj42346...

Cisco WebEx Meetings Server Unauthorized Meeting Actions Vulnerability

A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attackers to join meetings they have not been authorized to attend or to end meetings for which they are not the host. The vulnerability is due to insufficient validation of user-supplied input. An attacker could...

CVE-2014-0682

Cisco WebEx Meetings Server is affected by CVE-2014-0682. The issue allows remote authenticated users to bypass authorization and either join arbitrary meetings or terminate a meeting without a host role by sending a crafted URL. Root cause: insufficient validation of user-supplied input. Impact:...

CVE-2014-0682

Cisco WebEx Meetings Server allows remote authenticated users to bypass authorization checks and 1 join arbitrary meetings, or 2 terminate a meeting without having a host role, via a crafted URL, aka Bug ID CSCuj42346...

PT-2014-3777

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meetings Server affected versions not specified Description The issue allows remote authenticated users to bypass authorization checks. This can lead to two main consequences: 1 joining arbitrary meetings, and 2 terminating a meeti...

CVE-2014-0682: Undefined Security Weakness

Cisco WebEx Meetings Server allows remote authenticated users to bypass authorization checks and 1 join arbitrary meetings, or 2 terminate a meeting without having a host role, via a crafted URL, aka Bug ID CSCuj42346...

Cisco WebEx Meetings Server Enterprise License Manager Administrative Password Disclosure Vulnerability

A vulnerability in the Cisco WebEx Meetings Server Enterprise License Manager web portal could allow an authenticated, remote attacker to view the administrative password for Cisco WebEx Meetings Server in clear text. The vulnerability is due to the inclusion of the Cisco WebEx Meetings Server...

CVE-2013-6687

The web portal in the Enterprise License Manager component in Cisco WebEx Meetings Server allows remote authenticated users to discover the cleartext administrative password by reading HTML source code, aka Bug ID CSCul33876...

CVE-2013-6687

The web portal in the Enterprise License Manager component in Cisco WebEx Meetings Server allows remote authenticated users to discover the cleartext administrative password by reading HTML source code, aka Bug ID CSCul33876...

CVE-2013-6687

The Cisco WebEx Meetings Server Enterprise License Manager web portal contains a vulnerability where an authenticated, remote attacker can view the cleartext administrator password by reading the page source (Bug CSCul33876). Root cause: the password is included in the source code of the Enterpri...

PT-2014-3168

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meetings Server affected versions not specified Description The issue concerns the Enterprise License Manager component in Cisco WebEx Meetings Server, where the web portal allows remote authenticated users to discover the cleartex...

CVE-2013-6687: Undefined Security Weakness

The web portal in the Enterprise License Manager component in Cisco WebEx Meetings Server allows remote authenticated users to discover the cleartext administrative password by reading HTML source code, aka Bug ID CSCul33876...

Cisco WebEx Training Center email枚举漏洞

Bugtraq ID:64292 CVE ID:CVE-2013-6968 Cisco WebEx Training Center是一款互动式培训解决方案，可开展电子教学。 Cisco WebEx Training Center中的培训注册页面存在安全漏洞，允许远程未验证远程攻击者枚举注册参会者的Email地址。 漏洞是由于注册错误系哦啊系，允许用户通过判断注册过程中返回的不同消息来获取其他用户的email地址信息。攻击者发送多个注册请求可触发该漏洞。 0 Cisco WebEx Training Center 厂商补丁： Cisco -----...

Cisco WebEx Training Center注册ID泄漏漏洞

Bugtraq ID:64286 CVE ID:CVE-2013-6973 Cisco WebEx Training Center是一款互动式培训解决方案，可开展电子教学。 Cisco WebEx Training Center不正确处理用户输入，允许远程攻击者利用漏洞提交恶意请求，获取其他用户注册ID信息。 0 Cisco WebEx Training Center 厂商补丁： Cisco ----- 用户可参考如下厂商提供的安全公告获得补丁信息：...