CVE-2014-2199
What it is
meetinginfo.do in Cisco WebEx Event Center, WebEx Meeting Center, WebEx Sales Center, WebEx Training Center, WebEx Meetings Server 1.5(.1.131) and earlier, and WebEx Business Suite (WBS) 27 before 27.32.31.16, 28 before 28.12.13.18, and 29 before 29.5.1.12 allows remote attackers to obtain sensitive meeting information by leveraging knowledge of a meeting identifier, aka Bug IDs CSCuo68624 and CSCue46738.
At a glance
- Exploitability
- Can be exploited over the network without logging in. Limited direct impact.
- Exploit odds
- 1.7% chance of exploitation in the next 30 days (EPSS).
- Fix
- A patch, advisory or fixed version is referenced. Upgrade or apply it.
Timeline
- PublishedDisclosed publicly on CVE.org and NVD
- Last updatedMost recent change to the record
Why it ranks here
- Exploited in the wild: no, CISA does not list it.
- Exploit odds: 1.7% in the next 30 days (EPSS).
- Severity: 5.0 MEDIUM (CVSS).
- Fix: a patch or advisory is linked.
Details
- Published
- Last modified
- Exploit probability
- 1.7% · EPSS, next 30 days
- Weakness
- CWE-200 · Information exposure
- Record status
- Modified
Affected
- Cisco Webex Business Suite 27.0
- Cisco Webex Business Suite 28.0
- Cisco Webex Business Suite 29.0
- Cisco Webex Event Center
- Cisco Webex Meeting Center
- Cisco Webex Meetings Server ≤ 1.5\(.1.131\)
- Cisco Webex Sales Center
- Cisco Webex Training Center
Attack profile CVSS 2.0 · 5.0
- Attack vector
- Network
- Complexity
- Low
- Authentication
- None
- Confidentiality
- Partial
- Integrity
- None
- Availability
- None
Raw vector
AV:N/AC:L/Au:N/C:P/I:N/A:N
Is it in your code?
Hand this to your coding agent. It searches your project for the affected products and checks versions. Nothing leaves your machine.
Read https://cve-list.com/agent/cve/CVE-2014-2199.md and follow it. Check whether this project is affected by CVE-2014-2199. Read only. Don't change anything and don't upload my code. Tell me yes, no or not sure, with the file as proof.
Fix and advisories
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2199
- http://tools.cisco.com/security/center/viewAlert.x?alertId=34252
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2199
- http://tools.cisco.com/security/center/viewAlert.x?alertId=34252
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2199
- http://tools.cisco.com/security/center/viewAlert.x?alertId=34252
- http://www.securitytracker.com/id/1030251
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2199
- http://tools.cisco.com/security/center/viewAlert.x?alertId=34252
- http://www.securitytracker.com/id/1030251