CVEvulnerability
CVE-2014-2199
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-05-20
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
meetinginfo.do in Cisco WebEx Event Center, WebEx Meeting Center, WebEx Sales Center, WebEx Training Center, WebEx Meetings Server 1.5(.1.131) and earlier, and WebEx Business Suite (WBS) 27 before 27.32.31.16, 28 before 28.12.13.18, and 29 before 29.5.1.12 allows remote attackers to obtain sensitive meeting information by leveraging knowledge of a meeting identifier, aka Bug IDs CSCuo68624 and CSCue46738.
Affected configurations
• cisco webex business suite 27.0
• cisco webex business suite 28.0
• cisco webex business suite 29.0
• cisco webex event center
• cisco webex meeting center
• cisco webex meetings server (<= 1.5\(.1.131\))
• cisco webex sales center
• cisco webex training center
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2199 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=34252 Vendor Advisory
- http://www.securitytracker.com/id/1030251 Third Party Advisory, VDB Entry
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2199 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=34252 Vendor Advisory
- http://www.securitytracker.com/id/1030251 Third Party Advisory, VDB Entry