CVE-2018-15446 — Sensitive Information Exposure in Cisco Meeting Server

CWE-200 — Sensitive Information Exposure4 documents4 sources
Severity
7.5HIGHNVD
CNA5.3
EPSS
0.4%
top 41.96%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco Meeting Server
Timeline
PublishedNov 8
Latest updateMay 13

Description

A vulnerability in Cisco Meeting Server could allow an unauthenticated, remote attacker to gain access to sensitive information. The vulnerability is due to improper protections on data that is returned from user meeting requests when the Guest access via ID and passcode option is set to Legacy mode. An attacker could exploit this vulnerability by sending meeting requests to an affected system. A successful exploit could allow the attacker to determine the values of meeting room unique identifie…

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-42c2-rg6h-pxvc: A vulnerability in Cisco Meeting Server could allow an unauthenticated, remote attacker to gain access to sensitive information↗2022-05-13
▶
CVEList
Cisco Meeting Server Information Disclosure Vulnerability↗2018-11-08
▶

📋Vendor Advisories

1
Cisco
Cisco Meeting Server Information Disclosure Vulnerability↗2018-11-07
▶
CVE-2018-15446 — Sensitive Information Exposure | cvebase