SB2016071504 - Command injection vulnerability in Cisco WebEx Meetings Server
Published: July 15, 2016 Updated: July 18, 2016
Security Bulletin ID
SB2016071504
Severity
Medium
Patch available
NO
Number of vulnerabilities
1
Exploitation vector
Remote access
Highest impact
Code execution
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Command injection vulnerability (CVE-ID: CVE-2016-1450)
The vulnerability allows a remote authenticated attacker to execute arbitrary commands on the target system.The vulnerability exists due to the expectation of a certain file type during an upload. A remote authenticated attacker can execute arbitrary commands by injecting specially crafted command arguments.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
Remediation
Cybersecurity Help is not aware of any official remediation provided by the vendor.