Information disclosure in Cisco WebEx Meetings Server - CVE-2018-0111
Published: January 17, 2018 / Updated: January 18, 2018
Vulnerability identifier: #VU10098
CSH Severity: Low
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-0111
CWE-ID: CWE-200
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to obtain potentially sensitive information.
The vulnerability exists due to a design flaw in Cisco WebEx Meetings Server. A remote attacker can utilize available resources, study the customer network and discover sensitive data about the application that may be used to conduct additional reconnaissance attacks.
Affected software
Cisco WebEx Meetings Server
How to mitigate CVE-2018-0111
Install update from vendor's website.