VulnerabilityModified
CVE-2015-0590
Cisco WebEx Meeting Center allows remote attackers to activate disabled meeting attributes, and consequently obtain sensitive information, by providing crafted parameters during a meeting-join action, aka Bug ID CSCuo34165.
MEDIUM 5.0EPSS 2.05%
Does this matter?
Lower severity and a low EPSS score (2.05%). Track it; it rarely justifies an emergency change on its own.
Description
Cisco WebEx Meeting Center allows remote attackers to activate disabled meeting attributes, and consequently obtain sensitive information, by providing crafted parameters during a meeting-join action, aka Bug ID CSCuo34165.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 2.05% probability · 80th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-200
- Affected
- cisco/webex meeting center
- Source
- psirt@cisco.com
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0590Vendor Advisory
- http://www.securitytracker.com/id/1031558
- https://exchange.xforce.ibmcloud.com/vulnerabilities/100576
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0590Vendor Advisory
- http://www.securitytracker.com/id/1031558
- https://exchange.xforce.ibmcloud.com/vulnerabilities/100576
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.