CVE-2014-3310: Input Validation

Published Jul 10, 2014

Updated

The File Transfer feature in WebEx Meetings Client in Cisco WebEx Meetings Server and WebEx Meeting Center does not verify that a requested file was an offered file, which allows remote attackers to read arbitrary files via a modified request, aka Bug IDs CSCup62442 and CSCup58463.

Affected Software

2 affected components

Cisco Webex Meeting Center

Cisco Webex Meetings Server

Event History

Jul 10, 2014

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2014-3310?

CVE-2014-3310 is classified as a high severity vulnerability due to its potential for unauthorized file access.

How do I fix CVE-2014-3310?

To fix CVE-2014-3310, update to the latest version of Cisco WebEx Meetings Client as provided in Cisco's security advisory.

What are the consequences of exploiting CVE-2014-3310?

Exploiting CVE-2014-3310 allows remote attackers to read arbitrary files on the affected systems.

Which systems are affected by CVE-2014-3310?

CVE-2014-3310 affects Cisco WebEx Meetings Server and Cisco WebEx Meeting Center.

Is user authentication bypassed in CVE-2014-3310?

Yes, CVE-2014-3310 allows attackers to read files without proper verification of access permissions.