Description
Cisco WebEx Meetings Server 1.5 presents the same CAPTCHA challenge for each login attempt, which makes it easier for remote attackers to obtain access via a brute-force approach of guessing usernames, aka Bug ID CSCuj40321.
References
- 20150109 Cisco WebEx Meetings Server User Enumeration Vulnerability vendor-advisory
- cisco-webex-cve20148034-info-disc(100552) vdb-entry
- 71978 vdb-entry
- http://tools.cisco.com/security/center/viewAlert.x?alertId=36990
- 1031543 vdb-entry