CVE-2014-2199: Infoleak
meetinginfo.do in Cisco WebEx Event Center, WebEx Meeting Center, WebEx Sales Center, WebEx Training Center, WebEx Meetings Server 1.5(.1.131) and earlier, and WebEx Business Suite (WBS) 27 before 27.32.31.16, 28 before 28.12.13.18, and 29 before 29.5.1.12 allows remote attackers to obtain sensitive meeting information by leveraging knowledge of a meeting identifier, aka Bug IDs CSCuo68624 and CSCue46738.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-2199?
CVE-2014-2199 has been classified as a high-severity vulnerability due to potential unauthorized access to sensitive information.
How do I fix CVE-2014-2199?
To mitigate CVE-2014-2199, update affected Cisco WebEx products to the latest versions as recommended by Cisco.
What types of products are affected by CVE-2014-2199?
CVE-2014-2199 affects various Cisco WebEx products including WebEx Event Center, Meeting Center, Sales Center, Training Center, and Business Suite version 27 and 28.
Is remote exploitation possible with CVE-2014-2199?
Yes, CVE-2014-2199 allows remote attackers to exploit the vulnerability without authentication.
What are the consequences of CVE-2014-2199?
Exploitation of CVE-2014-2199 could lead to unauthorized disclosure of sensitive information within vulnerable Cisco WebEx applications.