Cisco WebEx Meeting Center CVE-2015-4209 Authorization Bypass Vulnerability
BID:75351
Info
Cisco WebEx Meeting Center CVE-2015-4209 Authorization Bypass Vulnerability
| Bugtraq ID: | 75351 |
| Class: | Design Error |
| CVE: |
CVE-2015-4209 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 22 2015 12:00AM |
| Updated: | Jun 22 2015 12:00AM |
| Credit: | Cisco |
| Vulnerable: |
Cisco WebEx Meeting Center 0 |
| Not Vulnerable: | |
Discussion
Cisco WebEx Meeting Center CVE-2015-4209 Authorization Bypass Vulnerability
Cisco WebEx Meeting Center is prone to an authorization-bypass vulnerability.
Attackers can exploit this issue to gain unauthorized access and obtain sensitive information such as calendar files. This may aid in further attacks.
This issue is being tracked by Cisco Bug ID CSCur23913.
Cisco WebEx Meeting Center is prone to an authorization-bypass vulnerability.
Attackers can exploit this issue to gain unauthorized access and obtain sensitive information such as calendar files. This may aid in further attacks.
This issue is being tracked by Cisco Bug ID CSCur23913.
Exploit / POC
Cisco WebEx Meeting Center CVE-2015-4209 Authorization Bypass Vulnerability
An attacker can exploit this issue using readily available tools.
An attacker can exploit this issue using readily available tools.
Solution / Fix
Cisco WebEx Meeting Center CVE-2015-4209 Authorization Bypass Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Cisco WebEx Meeting Center CVE-2015-4209 Authorization Bypass Vulnerability
References:
References:
- Cisco Homepage (Cisco )
- Cisco WebEx Meeting Center Homepage (Cisco)
- Cisco WebEx Meetings Host Calendar Download Vulnerability (Cisco)