CVE-2014-2199: Infoleak
First published: Tue May 20 2014(Updated: )
meetinginfo.do in Cisco WebEx Event Center, WebEx Meeting Center, WebEx Sales Center, WebEx Training Center, WebEx Meetings Server 1.5(.1.131) and earlier, and WebEx Business Suite (WBS) 27 before 27.32.31.16, 28 before 28.12.13.18, and 29 before 29.5.1.12 allows remote attackers to obtain sensitive meeting information by leveraging knowledge of a meeting identifier, aka Bug IDs CSCuo68624 and CSCue46738.
Credit: ykramarz@cisco.com psirt@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Webex Business Suite | =27.0 | |
| Cisco Webex Business Suite | =28.0 | |
| Cisco Webex Business Suite | =29.0 | |
| Cisco Webex Events Center | ||
| Cisco Webex Meetings | ||
| Cisco Webex Meetings Server | <=1.5\(.1.131\) | |
| Cisco WebEx Sales Center | ||
| Cisco WebEx Training Center | ||
| =27.0 | ||
| =28.0 | ||
| =29.0 | ||
| <=1.5\(.1.131\) | ||
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2014-2199?
CVE-2014-2199 has been classified as a high-severity vulnerability due to potential unauthorized access to sensitive information.
How do I fix CVE-2014-2199?
To mitigate CVE-2014-2199, update affected Cisco WebEx products to the latest versions as recommended by Cisco.
What types of products are affected by CVE-2014-2199?
CVE-2014-2199 affects various Cisco WebEx products including WebEx Event Center, Meeting Center, Sales Center, Training Center, and Business Suite version 27 and 28.
Is remote exploitation possible with CVE-2014-2199?
Yes, CVE-2014-2199 allows remote attackers to exploit the vulnerability without authentication.
What are the consequences of CVE-2014-2199?
Exploitation of CVE-2014-2199 could lead to unauthorized disclosure of sensitive information within vulnerable Cisco WebEx applications.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/weakness
- agent/severity
- agent/description
- agent/first-publish-date
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/author
- agent/source
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/cisco
- canonical/cisco webex business suite
- version/cisco webex business suite/27.0
- version/cisco webex business suite/28.0
- version/cisco webex business suite/29.0
- canonical/cisco webex events center
- canonical/cisco webex meetings
- canonical/cisco webex meetings server
- version/cisco webex meetings server/1.5\(.1.131\)
- canonical/cisco webex sales center
- canonical/cisco webex training center