PT-2014-5205 · Cisco · Webex Meetings Client+2

Published 2014-07-10 · Updated 2017-08-29 · CVE-2014-3310

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meetings Server and WebEx Meeting Center (affected versions not specified)

Description The issue concerns the File Transfer feature in the WebEx Meetings Client, which fails to verify if a requested file was an offered file. This allows remote attackers to read arbitrary files by modifying a request.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2014-3310

Affected Products

Webex Meeting Center

Webex Meetings Client

Webex Meetings Server

References · 5

• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3310 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-3310 · Security Note
• http://securityfocus.com/bid/68503 · Note
• http://securitytracker.com/id/1030551 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/94431 · Note