CVE-2014-3302

EPSS 0.3%
Veröffentlicht 01.08.2014 05:12:51
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle psirt@cisco.com
CVE-Watchlists
Login
Unerledigt
Login

user.php in Cisco WebEx Meetings Server 1.5(.1.131) and earlier does not properly implement the token timer for authenticated encryption, which allows remote attackers to obtain sensitive information via a crafted URL, aka Bug ID CSCuj81708.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 9

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Cisco ≫ Webex Meetings Server Version <= 1.5\(.1.131\)

Cisco ≫ Webex Meetings Server Version1.5

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.3%	0.505

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5.8	8.6	4.9	AV:N/AC:M/Au:N/C:P/I:P/A:N

http://secunia.com/advisories/58624

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3302

Vendor Advisory

http://tools.cisco.com/security/center/viewAlert.x?alertId=35050

Vendor Advisory

http://www.securityfocus.com/bid/68904

Third Party Advisory

VDB Entry

http://www.securitytracker.com/id/1030646

Third Party Advisory

VDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/94892

https://nvd.nist.gov/vuln/detail/CVE-2014-3302

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2014-3302

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2014-3302

EUVD