Lucene search

K
ciscoCiscoCISCO-SA-20150623-CVE-2015-4212
HistoryJun 23, 2015 - 8:53 p.m.

Cisco WebEx Meeting Center Data and Credential Exposure Vulnerability

2015-06-2320:53:00
tools.cisco.com
13

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

0.001

Percentile

46.7%

A vulnerability in Cisco WebEx Meeting Center could allow an unauthenticated, remote attacker to access data and credentials.

The vulnerability is due to the exposure of sensitive information. An attacker could exploit this vulnerability to access data and credentials.

Cisco has confirmed the vulnerability and released software updates.

Cisco indicates through the CVSS score that functional exploit code exists; however, the code is not known to be publicly available.

Affected configurations

Vulners
Node
ciscowebex_meeting_centerMatchany
OR
ciscowebex_meeting_centerMatchany
VendorProductVersionCPE
ciscowebex_meeting_centeranycpe:2.3:a:cisco:webex_meeting_center:any:*:*:*:*:*:*:*

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

0.001

Percentile

46.7%

Related for CISCO-SA-20150623-CVE-2015-4212