Lucene search

CiscoCVE-2014-8031

HistoryJan 09, 2015 - 2:59 a.m.

CVE-2014-8031

2015-01-0902:59:06

CWE-352

cisco

web.nvd.nist.gov

cisco

webex

meetings

server

csrf

vulnerability

cve-2014-8031

nvd

bug id

cscuj40456

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.4

Confidence

Low

EPSS

0.002

Percentile

58.4%

JSON

Cross-site request forgery (CSRF) vulnerability in Cisco WebEx Meetings Server allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuj40456.

Affected configurations

Nvd

Node

ciscowebex_meetings_serverMatch-

VendorProductVersionCPE
ciscowebex_meetings_server-cpe:2.3:a:cisco:webex_meetings_server:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	webex_meetings_server	-	cpe:2.3:a:cisco:webex_meetings_server:-:::::::*

References

secunia.com/advisories/62173

tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8031

www.securityfocus.com/bid/71943

www.securitytracker.com/id/1031517

exchange.xforce.ibmcloud.com/vulnerabilities/100575

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.4

Confidence

Low

EPSS

0.002

Percentile

58.4%

JSON

Related for CVE-2014-8031