CVE-2014-2199

Medium

Description

meetinginfo.do in Cisco WebEx Event Center, WebEx Meeting Center, WebEx Sales Center, WebEx Training Center, WebEx Meetings Server 1.5(.1.131) and earlier, and WebEx Business Suite (WBS) 27 before 27.32.31.16, 28 before 28.12.13.18, and 29 before 29.5.1.12 allows remote attackers to obtain sensitive meeting information by leveraging knowledge of a meeting identifier, aka Bug IDs CSCuo68624 and CSCue46738.

SeverityMedium
CVSS5.0
Exploit probability—
ProductCisco Webex Business Suite
PublishedMay 20, 2014
First seenMay 20, 2014

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
cisco webex_business_suite27.0, 28.0, 29.0—
cisco webex_event_centerNo range specified—
cisco webex_meeting_centerNo range specified—
cisco webex_meetings_serverv ≤ 1.5\(.1.131\)—
cisco webex_sales_centerNo range specified—
cisco webex_training_centerNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.