Cisco WebEx up to 27.32.31.15/28.12.13.17/29.5.1.11 Event Center meetinginfo.do information disclosure

Summaryinfo

A vulnerability described as problematic has been identified in Cisco WebEx up to 27.32.31.15/28.12.13.17/29.5.1.11. This impacts an unknown function of the file meetinginfo.do of the component Event Center. The manipulation results in information disclosure. This vulnerability is reported as CVE-2014-2199. No exploit exists. Upgrading the affected component is recommended.

Detailsinfo

A vulnerability, which was classified as problematic, was found in Cisco WebEx up to 27.32.31.15/28.12.13.17/29.5.1.11 (Unified Communication Software). Affected is an unknown code block of the file meetinginfo.do of the component Event Center. The manipulation with an unknown input leads to a information disclosure vulnerability. CWE is classifying the issue as CWE-200. The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. This is going to have an impact on confidentiality. CVE summarizes:

meetinginfo.do in Cisco WebEx Event Center, WebEx Meeting Center, WebEx Sales Center, WebEx Training Center, WebEx Meetings Server 1.5(.1.131) and earlier, and WebEx Business Suite (WBS) 27 before 27.32.31.16, 28 before 28.12.13.18, and 29 before 29.5.1.12 allows remote attackers to obtain sensitive meeting information by leveraging knowledge of a meeting identifier, aka Bug IDs CSCuo68624 and CSCue46738.

The weakness was disclosed 05/15/2014 with Cisco as CSCue46738 / CSCuo68624 as confirmed security notice (Website). The advisory is available at tools.cisco.com. This vulnerability is traded as CVE-2014-2199 since 02/25/2014. The exploitability is told to be easy. It is possible to launch the attack remotely. The exploitation doesn't require any form of authentication. Technical details are known, but there is no available exploit. This vulnerability is assigned to T1592 by the MITRE ATT&CK project. The advisory points out:

The vulnerability is due to meeting identifiers that are not randomly generated and may be enumerated. This may result in the disclosure of information such as the meeting title, meeting organizer, time, date, and duration of the meeting. If the meeting organizer does not require a password to attend the meeting or event, the meeting number is also returned and may be used to attend a meeting that is in progress. Even if a password is configured for a meeting, it is not required for participation on the audio bridge.

Upgrading to version 27.32.31.16, 28.12.13.18 or 29.5.1.12 eliminates this vulnerability. The upgrade is hosted for download at software.cisco.com. A possible mitigation has been published immediately after the disclosure of the vulnerability. The security notice contains the following remark:

Meeting organizers should require a password when scheduling WebEx meetings or events. The site administrator for the WebEx service can configure site-wide parameters to require passwords for all meetings. After all expected attendees have joined the meeting, the meeting host may lock the meeting, preventing others from attending by selecting the Restrict Access option from the Meeting menu. If the title of the meeting contains sensitive information, the meeting should be scheduled as an unlisted meeting. The site administrator for the WebEx service can configure site-wide parameters to prevent users from scheduling listed meetings and require users to enter a password when scheduling meetings or events to prevent unauthorized disclosure of meeting numbers.

The vulnerability is also documented in the databases at X-Force (93172), SecurityFocus (BID 67424†) and SecurityTracker (ID 1030251†). Further details are available at tools.cisco.com. If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Type

• Unified Communication Software

Vendor

• Cisco

Name

• WebEx

Version

• 27.32.31.0
• 27.32.31.1
• 27.32.31.2
• 27.32.31.3
• 27.32.31.4
• 27.32.31.5
• 27.32.31.6
• 27.32.31.7
• 27.32.31.8
• 27.32.31.9
• 27.32.31.10
• 27.32.31.11
• 27.32.31.12
• 27.32.31.13
• 27.32.31.14
• 27.32.31.15
• 28.12.13.0
• 28.12.13.1
• 28.12.13.2
• 28.12.13.3
• 28.12.13.4
• 28.12.13.5
• 28.12.13.6
• 28.12.13.7
• 28.12.13.8
• 28.12.13.9
• 28.12.13.10
• 28.12.13.11
• 28.12.13.12
• 28.12.13.13
• 28.12.13.14
• 28.12.13.15
• 28.12.13.16
• 28.12.13.17
• 29.5.1.0
• 29.5.1.1
• 29.5.1.2
• 29.5.1.3
• 29.5.1.4
• 29.5.1.5
• 29.5.1.6
• 29.5.1.7
• 29.5.1.8
• 29.5.1.9
• 29.5.1.10
• 29.5.1.11

License

• commercial

Website

• Vendor: https://www.cisco.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion