CVE-2014-3302: Medium severity cisco webex meetings server vulnerability
Published Aug 1, 2014
·Updated
user.php in Cisco WebEx Meetings Server 1.5(.1.131) and earlier does not properly implement the token timer for authenticated encryption, which allows remote attackers to obtain sensitive information via a crafted URL, aka Bug ID CSCuj81708.
Affected Software
3 affected components
Cisco Webex Meetings Server<=1.5\(.1.131\)
Cisco Webex Meetings Server=1.5
Cisco Webex Meetings Server=1.5\(.1.6\)
Event History
Aug 1, 2014
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-3302?
CVE-2014-3302 is classified as a medium severity vulnerability.
2
How does CVE-2014-3302 affect Cisco WebEx Meetings Server?
CVE-2014-3302 allows remote attackers to obtain sensitive information via a crafted URL.
3
How do I fix CVE-2014-3302?
To fix CVE-2014-3302, upgrade your Cisco WebEx Meetings Server to the latest version that addresses this vulnerability.
4
What versions of Cisco WebEx Meetings Server are affected by CVE-2014-3302?
CVE-2014-3302 affects Cisco WebEx Meetings Server versions 1.5 and earlier, specifically up to version 1.5(.1.131).
5
Is authentication required to exploit CVE-2014-3302?
No, exploitation of CVE-2014-3302 does not require authentication.