Detections
Analytics

CVE-2014-3302

high

Description

user.php in Cisco WebEx Meetings Server 1.5(.1.131) and earlier does not properly implement the token timer for authenticated encryption, which allows remote attackers to obtain sensitive information via a crafted URL, aka Bug ID CSCuj81708.

References

http://www.securitytracker.com/id/1030646

http://www.securityfocus.com/bid/68904

https://exchange.xforce.ibmcloud.com/vulnerabilities/94892

http://tools.cisco.com/security/center/viewAlert.x?alertId=35050

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3302

http://secunia.com/advisories/58624

Details

Source: Mitre, NVD

Published: 2014-08-01

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 5.8

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 7.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Severity: High

EPSS

EPSS: 0.00302