Back to search
CVE-2014-3302
Published: Aug 1, 2014
Modified: Aug 6, 2024
PUBLISHED
Description
user.php in Cisco WebEx Meetings Server 1.5(.1.131) and earlier does not properly implement the token timer for authenticated encryption, which allows remote attackers to obtain sensitive information via a crafted URL, aka Bug ID CSCuj81708.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
68904
vdb-entry
x_refsource_BID
20140725 Cisco WebEx Meetings Server Authenticated Encryption Vulnerability
vendor-advisory
x_refsource_CISCO
cisco-webex-cve20143302-info-disc(94892)
vdb-entry
x_refsource_XF
58624
third-party-advisory
x_refsource_SECUNIA
http://tools.cisco.com/security/center/viewAlert.x?alertId=35050
x_refsource_CONFIRM
1030646
vdb-entry
x_refsource_SECTRACK
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now