CVE-2017-12365
published 2017-11-30CVE-2017-12365: A vulnerability in Cisco WebEx Event Center could allow an authenticated, remote attacker to view unlisted meeting information. The vulnerability is due to a…
PriorityP421medium4.3CVSS 3.0
AVNACLPRLUINSUCLINAN
EPSS
1.24%
65.6th percentile
A vulnerability in Cisco WebEx Event Center could allow an authenticated, remote attacker to view unlisted meeting information. The vulnerability is due to a design flaw in the product. An attacker could execute a query on an Event Center site to view scheduled meetings. A successful query would show both listed and unlisted meetings in the displayed information. An attacker could use this information to attend meetings that are not available for their attendance. Cisco Bug IDs: CSCvg33629.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | webex_event_center | — | — |
| cisco | webex_meeting_center | — | — |
CVSS provenance
nvdv3.04.3MEDIUMCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
nvdv2.04.0MEDIUMAV:N/AC:L/Au:S/C:P/I:N/A:N
vendor_cisco4.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco WebEx Event Center Information Disclosure Vulnerability
vendor_cisco·2017-11-29·CVSS 4.3
CVE-2017-12365 [MEDIUM] CWE-200 Cisco WebEx Event Center Information Disclosure Vulnerability
Cisco WebEx Event Center Information Disclosure Vulnerability
A vulnerability in Cisco WebEx Event Center could allow an authenticated, remote attacker to view unlisted meeting information.
The vulnerability is due to a design flaw in the product. An attacker could execute a query on an Event Center site to view scheduled meetings. A successful query would show both listed and unlisted meetings in the displayed information. An attacker could use this information to attend meetings that are not available for their attendance.
There are no workarounds that address this vulnerability.
This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-webex4
Cisco
Cisco WebEx Event Center Information Disclosure Vulnerability
vendor_cisco·CVSS 3.0
CVE-2017-12365 Cisco WebEx Event Center Information Disclosure Vulnerability
CVE-2017-12365: Cisco WebEx Event Center Information Disclosure Vulnerability
A vulnerability in Cisco WebEx Event Center could allow an authenticated, remote attacker to view unlisted meeting information. The vulnerability is due to a design flaw in the product. An attacker could execute a query on an Event Center site to view scheduled meetings. A successful query would show both listed and unlisted meetings in the displayed information. An attacker could use this information to attend meetings that are not available for their attendance. There are no
CVSS: 3.0
CWE: CWE-200, CWE-200
Bug IDs: CSCvg33629
GHSA
GHSA-r2vf-x75v-28pc: A vulnerability in Cisco WebEx Event Center could allow an authenticated, remote attacker to view unlisted meeting information
ghsa_unreviewed·2022-05-13
CVE-2017-12365 [MEDIUM] CWE-200 GHSA-r2vf-x75v-28pc: A vulnerability in Cisco WebEx Event Center could allow an authenticated, remote attacker to view unlisted meeting information
A vulnerability in Cisco WebEx Event Center could allow an authenticated, remote attacker to view unlisted meeting information. The vulnerability is due to a design flaw in the product. An attacker could execute a query on an Event Center site to view scheduled meetings. A successful query would show both listed and unlisted meetings in the displayed information. An attacker could use this information to attend meetings that are not available for their attendance. Cisco Bug IDs: CSCvg33629.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://www.securityfocus.com/bid/101999http://www.securitytracker.com/id/1039920https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-webex4http://www.securityfocus.com/bid/101999http://www.securitytracker.com/id/1039920https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-webex4
2017-11-30
Published