PT-2017-1535 · Cisco · Cisco Webex Meetings Server

Publicado 2017-03-17 · Atualizado 2017-07-12 · CVE-2017-3880

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meetings Server versions 2.5 through 2.8

Description The issue is related to insufficient authentication procedures in the software, potentially allowing a remote attacker to partially compromise the confidentiality and integrity of information. An unauthenticated, remote attacker could access limited meeting information on the Cisco WebEx Meetings Server.

Recommendations For versions 2.5 through 2.8, apply the necessary patches or updates to resolve the authentication bypass issue, specifically considering the patch T29 orion merge and the Orion1.1.2.patch update.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

BDU:2017-00680

CVE-2017-3880

Produtos afetados

Cisco Webex Meetings Server

Referências · 6

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-webex · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-3880 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2017-00680 · Nota de Segurança
• http://securityfocus.com/bid/96918 · Nota
• http://securitytracker.com/id/1038040 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-3880 · Nota de Segurança