Cisco WebEx Meetings Server Information Disclosure Vulnerability

A vulnerability in the file URI scheme of Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to access sensitive information.

The vulnerability is due to inclusion of sensitive information in URLs. An attacker could exploit the vulnerability by viewing application URL requests that contain sensitive information.

Cisco has confirmed the vulnerability and released updated software.

To exploit the vulnerability, the attacker may need access to trusted or internal networks to view application URL requests made by the affected software. This access requirement could limit the likelihood of a successful exploit.