CVE-2014-3302
- State
- Published
- Severity
- Not scored
- Published
- Aug 1, 2014
- Updated
- Aug 6, 2024
- Reserved
- May 7, 2014
Description
user.php in Cisco WebEx Meetings Server 1.5(.1.131) and earlier does not properly implement the token timer for authenticated encryption, which allows remote attackers to obtain sensitive information via a crafted URL, aka Bug ID CSCuj81708.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 68904vdb-entry
- 20140725 Cisco WebEx Meetings Server Authenticated Encryption Vulnerabilityvendor-advisory
- cisco-webex-cve20143302-info-disc(94892)vdb-entry
- 58624third-party-advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=35050
- 1030646vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.