PT-2014-4553 · Cisco · Cisco Webex Event Center+5

Published 2014-05-20 · Updated 2016-09-07 · CVE-2014-2199

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco WebEx Event Center versions 1.5(.1.131) and earlier Cisco WebEx Meeting Center versions 1.5(.1.131) and earlier Cisco WebEx Sales Center versions 1.5(.1.131) and earlier Cisco WebEx Training Center versions 1.5(.1.131) and earlier Cisco WebEx Meetings Server versions 1.5(.1.131) and earlier Cisco WebEx Business Suite (WBS) versions 27 prior to 27.32.31.16 Cisco WebEx Business Suite (WBS) versions 28 prior to 28.12.13.18 Cisco WebEx Business Suite (WBS) versions 29 prior to 29.5.1.12

Description The issue allows remote attackers to obtain sensitive meeting information by leveraging knowledge of a meeting identifier.

Recommendations For Cisco WebEx Event Center versions 1.5(.1.131) and earlier, update to a version later than 1.5(.1.131). For Cisco WebEx Meeting Center versions 1.5(.1.131) and earlier, update to a version later than 1.5(.1.131). For Cisco WebEx Sales Center versions 1.5(.1.131) and earlier, update to a version later than 1.5(.1.131). For Cisco WebEx Training Center versions 1.5(.1.131) and earlier, update to a version later than 1.5(.1.131). For Cisco WebEx Meetings Server versions 1.5(.1.131) and earlier, update to a version later than 1.5(.1.131). For Cisco WebEx Business Suite (WBS) versions 27 prior to 27.32.31.16, update to version 27.32.31.16 or later. For Cisco WebEx Business Suite (WBS) versions 28 prior to 28.12.13.18, update to version 28.12.13.18 or later. For Cisco WebEx Business Suite (WBS) versions 29 prior to 29.5.1.12, update to version 29.5.1.12 or later.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2014-2199

Affected Products

Cisco Webex Business Suite

Cisco Webex Event Center

Cisco Webex Meeting Center

Cisco Webex Meetings Server

Cisco Webex Sales Center

Cisco Webex Training Center

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2014-2199 · Security Note
• http://tools.cisco.com/security/center/viewAlert.x?alertId=34252 · Vendor Advisory
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2199 · Vendor Advisory
• http://securitytracker.com/id/1030251 · Note