Unscored CVE-2014-3294 EUVD-2014-3307GHSA-v462-2mwx-w5pr

Cisco WebEx Meeting Server does not properly restrict the content of URLs, which allows remote authenticated users to obtain sensitive info…

Published Jun 10, 2014 · Updated Aug 6, 2024 · Assigned by cisco

Description

Cisco WebEx Meeting Server does not properly restrict the content of URLs, which allows remote authenticated users to obtain sensitive information by reading (1) web-server access logs, (2) web-server Referer logs, or (3) the browser history, aka Bug ID CSCuj81691.

References

68001 vdb-entry
1030412 vdb-entry
20140609 WebEx Meeting Server Sensitive Information Disclosure Vulnerability vendor-advisory