Description
Cisco WebEx Meetings Server allows remote authenticated users to bypass authorization checks and (1) join arbitrary meetings, or (2) terminate a meeting without having a host role, via a crafted URL, aka Bug ID CSCuj42346.
References
- 65198 vdb-entry
- 1029700 vdb-entry
- 102590 vdb-entry
- 20140128 Cisco WebEx Meetings Server Unauthorized Meeting Actions Vulnerability vendor-advisory
- 56668 third-party-advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=32618