CVEvulnerability

CVE-2017-3880

6.5 MEDIUM Published 2017-03-17 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-03-17
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
6.5 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
CVSS 2.0 ([email protected])
6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N
Weaknesses
CWE-287

Description

An Authentication Bypass vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to access limited meeting information on the Cisco WebEx Meetings Server. More Information: CSCvd50728. Known Affected Releases: 2.6 2.7 2.8 CWMS-2.5MR1 Orion1.1.2.patch T29_orion_merge.

Affected configurations

• cisco webex meetings server 2.5.1.5 • cisco webex meetings server 2.5.1.29 • cisco webex meetings server 2.5.99.2 • cisco webex meetings server 2.5 base • cisco webex meetings server 2.5 mr1 • cisco webex meetings server 2.5 mr2 • cisco webex meetings server 2.5 mr3 • cisco webex meetings server 2.5 mr4 • cisco webex meetings server 2.5 mr5 • cisco webex meetings server 2.5 mr6 • cisco webex meetings server 2.6.0 • cisco webex meetings server 2.6.1.39 • cisco webex meetings server 2.6 mr1 • cisco webex meetings server 2.6 mr2 • cisco webex meetings server 2.6 mr3 • cisco webex meetings server 2.7.1 • cisco webex meetings server 2.7 base • cisco webex meetings server 2.7 mr1 • cisco webex meetings server 2.7 mr2

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References