CVE-2017-12363: Medium severity cisco webex meetings server vulnerability
A vulnerability in Cisco WebEx Meeting Server could allow an unauthenticated, remote attacker to modify the welcome message of a meeting on an affected system. The vulnerability is due to insufficient security settings on meetings. An attacker could exploit this vulnerability by modifying the welcome message to a meeting. A successful exploit could allow the attacker to modify the welcome message of any known meeting. Cisco Bug IDs: CSCvf68695.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-12363?
CVE-2017-12363 is classified as a medium severity vulnerability due to its potential impact on meeting integrity.
How do I fix CVE-2017-12363?
To fix CVE-2017-12363, update your Cisco WebEx Meeting Server to the latest version provided by Cisco.
Who is affected by CVE-2017-12363?
CVE-2017-12363 affects Cisco WebEx Meeting Server versions 2.6.0.8 and 2.7.
What can an attacker do with CVE-2017-12363?
An attacker can modify the welcome message of a meeting on an affected Cisco WebEx Meeting Server.
Is CVE-2017-12363 exploitable remotely?
Yes, CVE-2017-12363 can be exploited by unauthenticated remote attackers.