CVE-2014-3340 in Webex MeetMeNow Server

الملخص

بحسب MITRE

Directory traversal vulnerability in an unspecified PHP script in the server in Cisco WebEx MeetMeNow allows remote authenticated users to read arbitrary files via a crafted request, aka Bug ID CSCuo16166.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• حجز: 07/05/2014
• إفشاء: 20/08/2014
• الاعتدال: تمت الموافقة
• إدخال: VDB-67385
• CPE: جاهز
• CWE: CWE-22 (مؤكد)
• CVSS: 4.3 (VulDB)
• EPSS: 0.02251
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Government, Pharma, ...

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2014-3340
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2014-3340
• CVE Details: https://www.cvedetails.com/cve/CVE-2014-3340/