CVE-2014-8034 - Cisco WebEx Meetings Server 1.5 presents the same CAPTCHA challenge for each login attempt, which ma

CVE-2014-8034

Summary

Cisco WebEx Meetings Server 1.5 presents the same CAPTCHA challenge for each login attempt, which makes it easier for remote attackers to obtain access via a brute-force approach of guessing usernames, aka Bug ID CSCuj40321.

References

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8034
http://tools.cisco.com/security/center/viewAlert.x?alertId=36990
http://www.securityfocus.com/bid/71978
http://www.securitytracker.com/id/1031543
https://exchange.xforce.ibmcloud.com/vulnerabilities/100552

Vulnerable Configurations

cpe:2.3:a:cisco:webex_meetings_server:1.5:*:*:*:*:*:*:*
cpe:2.3:a:cisco:webex_meetings_server:1.5:*:*:*:*:*:*:*

CVSS

Base:	5.0 (as of 08-09-2017 - 01:29)
Impact:
Exploitability:

CWE

CWE-255

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	NONE	NONE

cvss-vector via4

AV:N/AC:L/Au:N/C:P/I:N/A:N

refmap via4

bid	71978
cisco	20150109 Cisco WebEx Meetings Server User Enumeration Vulnerability
confirm	http://tools.cisco.com/security/center/viewAlert.x?alertId=36990
sectrack	1031543
xf	cisco-webex-cve20148034-info-disc(100552)

Last major update

08-09-2017 - 01:29

Published

15-01-2015 - 22:59

Last modified

08-09-2017 - 01:29