// For flags

CVE-2018-0109

 

Severity Score

2.7
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

Track
*SSVC
Descriptions

A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to access sensitive data about the application. An attacker could exploit this vulnerability to obtain information to conduct additional reconnaissance attacks. The vulnerability is due to a design flaw in Cisco WebEx Meetings Server that could allow an attacker who is authenticated as root to gain shared secrets. An attacker could exploit the vulnerability by accessing the root account and viewing sensitive information. Successful exploitation could allow the attacker to discover sensitive information about the application. Cisco Bug IDs: CSCvg42664.

Una vulnerabilidad en Cisco WebEx Meetings Server podría permitir que un atacante remoto autenticado acceda a datos sensibles sobre la aplicación. Un atacante podría explotar esta vulnerabilidad para obtener información y realizar ataques de reconocimiento adicionales. La vulnerabilidad se debe a un fallo de diseño en Cisco WebEx Meetings Server que podría permitir que un atacante que está autenticado como root obtenga secretos compartidos. Un atacante podría explotar esta vulnerabilidad accediendo a la cuenta roo y visualizando información sensible. Su explotación exitosa podría permitir que el atacante descubra información sensible sobre la aplicación. Cisco Bug IDs: CSCvg42664.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
None
Attack Vector
Network
Attack Complexity
Low
Authentication
Single
Confidentiality
Partial
Integrity
None
Availability
None
* Common Vulnerability Scoring System
SSVC
  • Decision:Track
Exploitation
None
Automatable
No
Tech. Impact
Partial
* Organization's Worst-case Scenario
Timeline
  • 2017-11-27 CVE Reserved
  • 2018-01-18 CVE Published
  • 2024-12-02 CVE Updated
  • 2025-03-30 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Cisco
Search vendor "Cisco"
 Webex Meetings Server
Search vendor "Cisco" for product "Webex Meetings Server"
*-
Affected