CVE-2015-0595

The XMLAPI in Cisco WebEx Meetings Server 1.5(.1.131) and earlier allows remote attackers to obtain sensitive information by reading return messages from crafted GET requests, aka Bug ID CSCuj67079.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://secunia.com/advisories/62686
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0595	Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=37238	Vendor Advisory
http://www.securityfocus.com/bid/72370	Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1031676	Third Party Advisory VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/100667
http://secunia.com/advisories/62686
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0595	Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=37238	Vendor Advisory
http://www.securityfocus.com/bid/72370	Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1031676	Third Party Advisory VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/100667

Configurations

Configuration 1 (hide)

cpe:2.3:a:cisco:webex_meetings_server:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2015-02-02 01:59

Updated : 2025-04-12 10:46

NVD link : CVE-2015-0595

Mitre link : CVE-2015-0595

CVE.ORG link : CVE-2015-0595

JSON object : View

Products Affected

cisco

webex_meetings_server

CWE

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

{"id": "CVE-2015-0595", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2015-02-02T01:59:06.670", "references": [{"url": "http://secunia.com/advisories/62686", "source": "psirt@cisco.com"}, {"url": "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0595", "tags": ["Vendor Advisory"], "source": "psirt@cisco.com"}, {"url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=37238", "tags": ["Vendor Advisory"], "source": "psirt@cisco.com"}, {"url": "http://www.securityfocus.com/bid/72370", "tags": ["Third Party Advisory", "VDB Entry"], "source": "psirt@cisco.com"}, {"url": "http://www.securitytracker.com/id/1031676", "tags": ["Third Party Advisory", "VDB Entry"], "source": "psirt@cisco.com"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/100667", "source": "psirt@cisco.com"}, {"url": "http://secunia.com/advisories/62686", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0595", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=37238", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/72370", "tags": ["Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securitytracker.com/id/1031676", "tags": ["Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/100667", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "The XMLAPI in Cisco WebEx Meetings Server 1.5(.1.131) and earlier allows remote attackers to obtain sensitive information by reading return messages from crafted GET requests, aka Bug ID CSCuj67079."}, {"lang": "es", "value": "La API XMLen Cisco WebEx Meetings Server 1.5(.1.131) y anteriores permite a atacantes remotos obtener informaci\u00f3n sensible mediante la lectura de mensajes de retorno de solicitudes GET manipulados, tambi\u00e9n conocido como Bug ID CSCuj67079."}], "lastModified": "2025-04-12T10:46:40.837", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cisco:webex_meetings_server:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DFBF4BC9-68A8-4AF2-88C3-EDADB721B6C8", "versionEndIncluding": "1.5\\(.1.131\\)"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@cisco.com"}