Cisco WebEx Meetings Server before 1.1 uses meeting IDs with insufficient entropy, which makes it easier for remote attackers to bypass authentication and join arbitrary meetings without a password, aka Bug ID CSCuc79643.
References
Link | Resource |
---|---|
https://www.cisco.com/c/en/us/td/docs/collaboration/CWMS/1_1/b_Release_Notes.html | Release Notes Vendor Advisory |
Configurations
Information
Published : 2017-10-24 07:29
Updated : 2017-11-14 10:38
NVD link : CVE-2014-0691
Mitre link : CVE-2014-0691
JSON object : View
CWE
CWE-331
Insufficient Entropy
Products Affected
cisco
- webex_meetings_server