Cisco WebEx Meeting Center places a meeting's access number in a URL, which allows remote attackers to obtain sensitive information and bypass intended attendance restrictions by visiting a meeting-registration page, aka Bug ID CSCus62147.
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Link | Tags |
---|---|
http://www.securityfocus.com/bid/75350 | third party advisory vdb entry |
http://tools.cisco.com/security/center/viewAlert.x?alertId=39457 | vendor advisory |
http://www.securitytracker.com/id/1032705 | third party advisory vdb entry |