PT-2015-3996 · Cisco · Cisco Webex Meetings Server

Publicado 2015-01-15 · Atualizado 2017-09-08 · CVE-2014-8034

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meetings Server version 1.5

Description The issue allows remote attackers to gain access via a brute-force approach by guessing usernames, as the same CAPTCHA challenge is presented for each login attempt.

Recommendations For Cisco WebEx Meetings Server version 1.5, consider implementing additional security measures to prevent brute-force attacks, such as limiting the number of login attempts or using a more robust CAPTCHA system. As a temporary workaround, restrict access to the login functionality to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2014-8034

Produtos afetados

Cisco Webex Meetings Server

Referências · 6

• https://exchange.xforce.ibmcloud.com/vulnerabilities/100552 · Nota
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8034 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2014-8034 · Nota de Segurança
• http://securitytracker.com/id/1031543 · Nota
• http://tools.cisco.com/security/center/viewAlert.x?alertId=36990 · Aviso do Fabricante
• http://securityfocus.com/bid/71978 · Nota