Cisco WebEx Meetings Server CVE-2014-8035 User Enumeration Vulnerability
BID:71980
Info
Cisco WebEx Meetings Server CVE-2014-8035 User Enumeration Vulnerability
| Bugtraq ID: | 71980 |
| Class: | Access Validation Error |
| CVE: |
CVE-2014-8035 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 09 2015 12:00AM |
| Updated: | Jan 09 2015 12:00AM |
| Credit: | Cisco |
| Vulnerable: |
Cisco WebEx Meetings Server 0 |
| Not Vulnerable: | |
Discussion
Cisco WebEx Meetings Server CVE-2014-8035 User Enumeration Vulnerability
Cisco WebEx Meetings Server is prone to a user-enumeration vulnerability.
An attacker may leverage this issue to harvest valid user accounts, which may aid in brute-force attacks.
This issue being tracked by Cisco Bug ID CSCuj40247.
Cisco WebEx Meetings Server is prone to a user-enumeration vulnerability.
An attacker may leverage this issue to harvest valid user accounts, which may aid in brute-force attacks.
This issue being tracked by Cisco Bug ID CSCuj40247.
Exploit / POC
Cisco WebEx Meetings Server CVE-2014-8035 User Enumeration Vulnerability
Attackers can exploit this issue using browser or readily available tools.
Attackers can exploit this issue using browser or readily available tools.
References
Cisco WebEx Meetings Server CVE-2014-8035 User Enumeration Vulnerability
References:
References:
- Cisco Homepage (Cisco )
- Cisco WebEx Meetings Server User Enumeration Vulnerability (cisco)