CVE-2017-3811: XEE

Published Mar 17, 2017

Updated

An XML External Entity vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to have read access to part of the information stored in the affected system. More Information: CSCvc39165. Known Affected Releases: 2.6. Known Fixed Releases: 2.7.1.2054.

Affected Software

1 affected component

Cisco Webex Meetings Server=2.6

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Cisco WebEx Meetings Server to a version that resolves this vulnerability.
Fixed in 2.7.1.2054Patch CSCvc39165

Event History

Mar 17, 2017

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

DescriptionWeakness

Data Sourced

via NVD·10:59 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2017-3811?

CVE-2017-3811 is classified as a medium severity vulnerability.

How do I fix CVE-2017-3811?

To fix CVE-2017-3811, upgrade to Cisco WebEx Meetings Server version 2.7.1.2054 or later.

What systems are affected by CVE-2017-3811?

CVE-2017-3811 affects Cisco WebEx Meetings Server version 2.6.

What type of attack does CVE-2017-3811 involve?

CVE-2017-3811 involves an XML External Entity (XXE) attack that can give read access to sensitive information.

Is authentication required to exploit CVE-2017-3811?

Yes, CVE-2017-3811 requires the attacker to be authenticated to exploit the vulnerability.