The play/modules component in Cisco WebEx Meetings Server allows remote attackers to obtain administrator access via crafted API requests, aka Bug ID CSCuj40421.
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
Link | Tags |
---|---|
http://www.securityfocus.com/bid/71950 | vdb entry |
https://exchange.xforce.ibmcloud.com/vulnerabilities/100572 | vdb entry |
http://www.securitytracker.com/id/1031517 | vdb entry |
http://secunia.com/advisories/60279 | third party advisory |
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8033 | vendor advisory |