CVE-2014-2199

meetinginfo.do in Cisco WebEx Event Center, WebEx Meeting Center, WebEx Sales Center, WebEx Training Center, WebEx Meetings Server 1.5(.1.131) and earlier, and WebEx Business Suite (WBS) 27 before 27.32.31.16, 28 before 28.12.13.18, and 29 before 29.5.1.12 allows remote attackers to obtain sensitive meeting information by leveraging knowledge of a meeting identifier, aka Bug IDs CSCuo68624 and CSCue46738.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2199	Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=34252	Vendor Advisory
http://www.securitytracker.com/id/1030251	Third Party Advisory VDB Entry

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:cisco:webex_business_suite:27.0:::::::*
	cpe:2.3:a:cisco:webex_business_suite:28.0:::::::*
	cpe:2.3:a:cisco:webex_business_suite:29.0:::::::*
	cpe:2.3:a:cisco:webex_event_center:-:::::::*
	cpe:2.3:a:cisco:webex_meeting_center:-:::::::*
	cpe:2.3:a:cisco:webex_meetings_server::::::::
	cpe:2.3:a:cisco:webex_sales_center:-:::::::*
	cpe:2.3:a:cisco:webex_training_center:-:::::::*

History

No history.

Information

Published : 2014-05-20 11:13

Updated : 2024-02-28 12:20

NVD link : CVE-2014-2199

Mitre link : CVE-2014-2199

CVE.ORG link : CVE-2014-2199

JSON object : View

Products Affected

cisco

webex_event_center
webex_sales_center
webex_meetings_server
webex_meeting_center
webex_business_suite
webex_training_center

CWE

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

{"id": "CVE-2014-2199", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2014-05-20T11:13:37.657", "references": [{"url": "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2199", "tags": ["Vendor Advisory"], "source": "ykramarz@cisco.com"}, {"url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=34252", "tags": ["Vendor Advisory"], "source": "ykramarz@cisco.com"}, {"url": "http://www.securitytracker.com/id/1030251", "tags": ["Third Party Advisory", "VDB Entry"], "source": "ykramarz@cisco.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "meetinginfo.do in Cisco WebEx Event Center, WebEx Meeting Center, WebEx Sales Center, WebEx Training Center, WebEx Meetings Server 1.5(.1.131) and earlier, and WebEx Business Suite (WBS) 27 before 27.32.31.16, 28 before 28.12.13.18, and 29 before 29.5.1.12 allows remote attackers to obtain sensitive meeting information by leveraging knowledge of a meeting identifier, aka Bug IDs CSCuo68624 and CSCue46738."}, {"lang": "es", "value": "meetinginfo.do en Cisco WebEx Event Center, WebEx Meeting Center, WebEx Sales Center, WebEx Training Center, WebEx Meetings Server 1.5(.1.131) y anteriores y WebEx Business Suite (WBS) 27 anterior a 27.32.31.16, 28 anterior a 28.12.13.18 y 29 anterior a 29.5.1.12 permite a atacantes remotos obtener informaci\u00f3n sensible de reuniones mediante el aprovechamiento de conocimiento de un identificador de reuni\u00f3n, tambi\u00e9n conocido como Bug IDs CSCuo68624 y CSCue46738."}], "lastModified": "2016-09-07T18:17:03.397", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cisco:webex_business_suite:27.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2CAD4B10-275C-4C1B-95C6-3805104CBE8B"}, {"criteria": "cpe:2.3:a:cisco:webex_business_suite:28.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B7544AE0-77D7-45CB-B49C-B060F9B51DDC"}, {"criteria": "cpe:2.3:a:cisco:webex_business_suite:29.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "320608BF-D0C5-4245-A200-613CB5BB185B"}, {"criteria": "cpe:2.3:a:cisco:webex_event_center:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "83E6A0CF-0BB4-447B-B061-E4DADDD88209"}, {"criteria": "cpe:2.3:a:cisco:webex_meeting_center:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4C046194-A216-4728-BAD9-4B675820F9F9"}, {"criteria": "cpe:2.3:a:cisco:webex_meetings_server:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DFBF4BC9-68A8-4AF2-88C3-EDADB721B6C8", "versionEndIncluding": "1.5\\(.1.131\\)"}, {"criteria": "cpe:2.3:a:cisco:webex_sales_center:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EFA5880C-52BA-47D2-9CAB-45C3FA6FCB52"}, {"criteria": "cpe:2.3:a:cisco:webex_training_center:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1D11FA31-28A2-47C6-9030-97A250951899"}], "operator": "OR"}]}], "sourceIdentifier": "ykramarz@cisco.com"}