CVE-2015-0597

The Forgot Password feature in Cisco WebEx Meetings Server 1.5(.1.131) and earlier allows remote attackers to enumerate administrative accounts via crafted packets, aka Bug IDs CSCuj67166 and CSCuj67159.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:N/A:N
ciscoCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 55%
VendorProductVersion
ciscowebex_meetings_server
𝑥
≤ 1.5\(.1.131\)
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0597
http://tools.cisco.com/security/center/viewAlert.x?alertId=37240
http://www.securityfocus.com/bid/72373
http://www.securitytracker.com/id/1031678
https://exchange.xforce.ibmcloud.com/vulnerabilities/100658
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0597
http://tools.cisco.com/security/center/viewAlert.x?alertId=37240
http://www.securityfocus.com/bid/72373
http://www.securitytracker.com/id/1031678
https://exchange.xforce.ibmcloud.com/vulnerabilities/100658