CVE-2014-3340 in Webex MeetMeNow Server

Riassunto

di MITRE

Directory traversal vulnerability in an unspecified PHP script in the server in Cisco WebEx MeetMeNow allows remote authenticated users to read arbitrary files via a crafted request, aka Bug ID CSCuo16166.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Prenotare: 07/05/2014
• Divulgazione: 20/08/2014
• Moderazione: accettato
• Voce: VDB-67385
• CPE: pronto
• CWE: CWE-22 (confermato)
• CVSS: 4.3 (VulDB)
• EPSS: 0.02251
• KEV: no
• Attività: molto basso
• Settore: Lawfirm, Chemical, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2014-3340
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2014-3340
• CVE Details: https://www.cvedetails.com/cve/CVE-2014-3340/