CVE-2014-0708 in WebEx Meeting Center
Summary
WebEx Meeting Center in Cisco WebEx Business Suite does not properly compose URLs for HTTP GET requests, which allows remote attackers to obtain sensitive information by reading (1) web-server access logs, (2) web-server Referer logs, or (3) a browser s history, aka Bug ID CSCul98272.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
01/02/2014
Disclosure
03/20/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 12672 | Cisco WebEx Meeting Center HTTP GET information disclosure | 200 | Unproven | Official fix | CVE-2014-0708 |