CVE-2019-15987
Medium
Description
A vulnerability in web interface of the Cisco Webex Event Center, Cisco Webex Meeting Center, Cisco Webex Support Center, and Cisco Webex Training Center could allow an unauthenticated, remote attacker to guess account usernames. The vulnerability is due to missing CAPTCHA protection in certain URLs. An attacker could exploit this vulnerability by sending a crafted request to the web interface. A successful exploit could allow the attacker to know if a given username is valid and find the real name of the user.
SeverityMedium
CVSS5.3
Exploit probability—
Product
Cisco Webex Meetings Online
PublishedNov 26, 2019
First seenNov 26, 2019
Weakness typeCWE-287Improper authentication
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco webex_meetings_online | 11.0.0 | — |
| cisco webex_meetings_server | 4.0 | — |
| cisco webex_event_center | No range specified | — |
| cisco webex_meeting_center | No range specified | — |
| cisco webex_support_center | No range specified | — |
| cisco webex_training_center | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.