Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2014-8034

Overview

Vulnerability Score 5.0 5.0
CVE Id CVE-2014-8034
Last Modified 10 Feb 2015 09:59:39
Published 15 Jan 2015 05:59:02
Confidentiality Impact PARTIAL PARTIAL
Integrity Impact NONE NONE
Availability Impact NONE NONE
Access Vector NETWORK
Access Complexity LOW
Authentication NONE

CVE-2014-8034

Summary

Cisco WebEx Meetings Server 1.5 presents the same CAPTCHA challenge for each login attempt, which makes it easier for remote attackers to obtain access via a brute-force approach of guessing usernames, aka Bug ID CSCuj40321.

Vulnerable Systems

Application

  • Cisco Webex Meetings Server 1.5


References

CONFIRM - http://tools.cisco.com/security/center/viewAlert.x?alertId=36990

CISCO - 20150109 Cisco WebEx Meetings Server User Enumeration Vulnerability

SECTRACK - 1031543

BID - 71978

XF - cisco-webex-cve20148034-info-disc(100552)


Last Updated: 27 May 2016 11:07:44