CVE-2017-3795: Medium severity Cisco Webex Meetings Server vulnerability

Published Jan 26, 2017

Updated

A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to conduct arbitrary password changes against any non-administrative user. More Information: CSCuz03345. Known Affected Releases: 2.6. Known Fixed Releases: 2.7.1.12.

Affected Software

1 affected component

Cisco Webex Meetings Server=2.6.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Cisco WebEx Meetings Server to a version that resolves this vulnerability.
Fixed in 2.7.1.12Patch CSCuz03345

Event History

Jan 26, 2017

CVE Published

via MITRE·07:45 AM

Data Sourced

via MITRE·07:45 AM

DescriptionWeakness

Data Sourced

via NVD·07:59 AM

DescriptionSeverityWeaknessAffected Software

Dec 13, 58332

Event

07:23 PM

Frequently Asked Questions

What is the severity of CVE-2017-3795?

CVE-2017-3795 has a high severity due to the potential for authenticated remote attackers to change passwords for non-administrative users.

How do I fix CVE-2017-3795?

To fix CVE-2017-3795, upgrade to the fixed release version 2.7.1.12 or later of Cisco WebEx Meetings Server.

What impact does CVE-2017-3795 have on users?

CVE-2017-3795 allows attackers to conduct arbitrary password changes, compromising user accounts.

Is there a workaround for CVE-2017-3795?

There is no known workaround for CVE-2017-3795; upgrading to a fixed release is necessary.

Which versions of Cisco WebEx Meetings Server are affected by CVE-2017-3795?

CVE-2017-3795 affects Cisco WebEx Meetings Server version 2.6.0.