5

CVE-2017-12297

A vulnerability in Cisco WebEx Meeting Center could allow an authenticated, remote attacker to initiate connections to arbitrary hosts, aka a "URL Redirection Vulnerability." The vulnerability is due to insufficient access control for HTTP traffic directed to the Cisco WebEx Meeting Center. An attacker could exploit this vulnerability by sending a malicious URL to the Cisco WebEx Meeting Center. An exploit could allow the attacker to connect to arbitrary hosts. Cisco Bug IDs: CSCvf63843.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Webex Meeting Center Version t30 Update sp7
Cisco ≫ Webex Meeting Center Version t30 Update sp8
Cisco ≫ Webex Meeting Center Version t30 Update sp9
Cisco ≫ Webex Meeting Center Version t31 Update sp8
Cisco ≫ Webex Meeting Center Version t31 Update sp9
Cisco ≫ Webex Meeting Center Version t32
Cisco ≫ Webex Meeting Center Version t32.3
Cisco ≫ Webex Meeting Center Version t32.4
Cisco ≫ Webex Meeting Center Version t32.6
Cisco ≫ Webex Meeting Center Version t32.7
Cisco ≫ Webex Meeting Center Version t32.8
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.17% 0.633
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 3.1 1.4
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N
NIST 4 8 2.9
AV:N/AC:L/Au:S/C:N/I:P/A:N
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.securityfocus.com/bid/101985
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1039919
Third Party Advisory
VDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-wmc
Vendor Advisory