CVEvulnerability
CVE-2014-3303
4.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-07-28
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
The web framework in Cisco WebEx Meetings Server does not properly restrict the content of query strings, which allows remote attackers to obtain sensitive information by reading (1) web-server access logs, (2) web-server Referer logs, or (3) the browser history, aka Bug ID CSCuj81713.
Affected configurations
• cisco webex meetings server
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3303 Vendor Advisory
- http://www.securityfocus.com/bid/68910 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1030645 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/94893 exchange.xforce.ibmcloud.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3303 Vendor Advisory
- http://www.securityfocus.com/bid/68910 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1030645 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/94893 exchange.xforce.ibmcloud.com