Cisco WebEx Meeting Center does not properly restrict the content of URLs, which allows remote attackers to obtain sensitive information via vectors related to file: URIs, aka Bug ID CSCus18281.
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Link | Tags |
---|---|
http://www.securityfocus.com/bid/72012 | vdb entry |
https://exchange.xforce.ibmcloud.com/vulnerabilities/100565 | vdb entry |
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0583 | vendor advisory |