CVEvulnerability

CVE-2015-0597

5.0 MEDIUM Published 2015-02-02 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2015-02-02
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 2.0 ([email protected]): 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses: CWE-20, CWE-200

Description

The Forgot Password feature in Cisco WebEx Meetings Server 1.5(.1.131) and earlier allows remote attackers to enumerate administrative accounts via crafted packets, aka Bug IDs CSCuj67166 and CSCuj67159.

Affected configurations

• cisco webex meetings server (<= 1.5\(.1.131\))

Weakness · CWE (2)

CWE-20 Improper Input Validation weakness
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0597 Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=37240 Vendor Advisory
http://www.securityfocus.com/bid/72373 Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1031678 Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/100658 exchange.xforce.ibmcloud.com
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0597 Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=37240 Vendor Advisory
http://www.securityfocus.com/bid/72373 Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1031678 Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/100658 exchange.xforce.ibmcloud.com

CVE-2015-0597

Description

Affected configurations

Related

Weakness · CWE (2)

References