First published: Fri Jan 09 2015(Updated: )
Cross-site request forgery (CSRF) vulnerability in Cisco WebEx Meetings Server allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuj40456.
Credit: ykramarz@cisco.com
Affected Software | Affected Version | How to fix |
---|---|---|
Cisco Webex Meetings Server Software |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2014-8031 has been classified as a medium-level vulnerability due to its potential for exploitation through cross-site request forgery.
To mitigate CVE-2014-8031, it is recommended to apply the security patches provided by Cisco for WebEx Meetings Server.
The impact of CVE-2014-8031 includes the possibility for attackers to hijack user sessions, potentially leading to unauthorized actions on behalf of users.
Yes, CVE-2014-8031 is exploitable remotely as it involves cross-site request forgery vulnerabilities accessible over the internet.
Any organization using Cisco WebEx Meetings Server may be affected by CVE-2014-8031 and should evaluate their security posture accordingly.