Unscored CVE-2014-3302 EUVD-2014-3315GHSA-86x7-g4xr-8m7m

user.php in Cisco WebEx Meetings Server 1.5(.1.131) and earlier does not properly implement the token timer for authenticated encryption, w…

Published Aug 1, 2014 · Updated Aug 6, 2024 · Assigned by cisco

Description

user.php in Cisco WebEx Meetings Server 1.5(.1.131) and earlier does not properly implement the token timer for authenticated encryption, which allows remote attackers to obtain sensitive information via a crafted URL, aka Bug ID CSCuj81708.

References

68904 vdb-entry
20140725 Cisco WebEx Meetings Server Authenticated Encryption Vulnerability vendor-advisory
cisco-webex-cve20143302-info-disc(94892) vdb-entry
58624 third-party-advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=35050
1030646 vdb-entry