VulnerabilityModified
CVE-2014-1664
The Citrix GoToMeeting application 5.0.799.1238 for Android logs HTTP requests containing sensitive information, which allows attackers to obtain user IDs, meeting details, and authentication tokens via an application that reads the system log file.
MEDIUM 5.0EPSS 2.98%
Does this matter?
Lower severity and a low EPSS score (2.98%). Track it; it rarely justifies an emergency change on its own.
Description
The Citrix GoToMeeting application 5.0.799.1238 for Android logs HTTP requests containing sensitive information, which allows attackers to obtain user IDs, meeting details, and authentication tokens via an application that reads the system log file.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 2.98% probability · 87th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-200
- Affected
- citrix/gotomeeting
- Source
- cve@mitre.org
References
- http://osvdb.org/102559
- http://www.securityfocus.com/archive/1/530879/100/0/threaded
- http://www.securityfocus.com/bid/65123Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90695
- http://osvdb.org/102559
- http://www.securityfocus.com/archive/1/530879/100/0/threaded
- http://www.securityfocus.com/bid/65123Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90695
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.