PT-2014-5205 · Cisco · Webex Meetings Client+2

Publicado 2014-07-10 · Atualizado 2017-08-29 · CVE-2014-3310

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meetings Server and WebEx Meeting Center (affected versions not specified)

Description The issue concerns the File Transfer feature in the WebEx Meetings Client, which fails to verify if a requested file was an offered file. This allows remote attackers to read arbitrary files by modifying a request.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2014-3310

Produtos afetados

Webex Meeting Center

Webex Meetings Client

Webex Meetings Server

Referências · 5

• http://securityfocus.com/bid/68503 · Nota
• http://securitytracker.com/id/1030551 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/94431 · Nota
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3310 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2014-3310 · Nota de Segurança