PT-2014-5182

CVE-2014-3286

·

Publicado

2014-06-08

·

Atualizado

2016-09-07

Descrição por

CVSS 2.0
5.0
Média
MétricasAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions Cisco WebEx Meeting Server (affected versions not specified)
Description The issue concerns the web framework in Cisco WebEx Meeting Server, which fails to properly restrict the content of reply messages. This allows remote attackers to obtain sensitive information via a crafted URL.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Fornecedores
Produtos afetados
Enumeração de fraquezas
CWE-264
Identificadores relacionados
CVE-2014-3286
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com