Description
The XML programmatic interface (XML PI) in Cisco WebEx Meeting Server 1.5(.1.131) and earlier allows remote authenticated users to obtain sensitive meeting information via a crafted URL, aka Bug ID CSCum03527.
References
- http://tools.cisco.com/security/center/viewAlert.x?alertId=34663
- 59263 third-party-advisory
- 68118 vdb-entry
- 20140619 Cisco WebEx Meeting Server Sensitive Information Disclosure Vulnerability vendor-advisory