Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2017-3880

An Authentication Bypass vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to access limited meeting information on the Cisco WebEx Meetings Server. More Information: CSCvd50728. Known Affected Releases: 2.6 2.7 2.8 CWMS-2.5MR1 Orion1.1.2.patch T29_orion_merge.

Published

2017-03-17T22:59:00.610

Last Modified

2025-04-20T01:37:25.860

Status

Deferred

Source

[email protected]

Severity

CVSSv3.0: 6.5 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: NONE
Exploitability Score

10.0

Impact Score

4.9

Weaknesses
  • Type: Primary
    CWE-287
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application cisco webex_meetings_server 2.5.1.5 Yes
Application cisco webex_meetings_server 2.5.1.29 Yes
Application cisco webex_meetings_server 2.5.99.2 Yes
Application cisco webex_meetings_server 2.5_base Yes
Application cisco webex_meetings_server 2.5_mr1 Yes
Application cisco webex_meetings_server 2.5_mr2 Yes
Application cisco webex_meetings_server 2.5_mr2 Yes
Application cisco webex_meetings_server 2.5_mr3 Yes
Application cisco webex_meetings_server 2.5_mr4 Yes
Application cisco webex_meetings_server 2.5_mr5 Yes
Application cisco webex_meetings_server 2.5_mr5 Yes
Application cisco webex_meetings_server 2.5_mr6 Yes
Application cisco webex_meetings_server 2.5_mr6 Yes
Application cisco webex_meetings_server 2.5_mr6 Yes
Application cisco webex_meetings_server 2.5_mr6 Yes
Application cisco webex_meetings_server 2.5_mr6 Yes
Application cisco webex_meetings_server 2.6.0 Yes
Application cisco webex_meetings_server 2.6.1.39 Yes
Application cisco webex_meetings_server 2.6_mr1 Yes
Application cisco webex_meetings_server 2.6_mr1 Yes
Application cisco webex_meetings_server 2.6_mr2 Yes
Application cisco webex_meetings_server 2.6_mr2 Yes
Application cisco webex_meetings_server 2.6_mr3 Yes
Application cisco webex_meetings_server 2.6_mr3 Yes
Application cisco webex_meetings_server 2.6_mr3 Yes
Application cisco webex_meetings_server 2.7.1 Yes
Application cisco webex_meetings_server 2.7_base Yes
Application cisco webex_meetings_server 2.7_mr1 Yes
Application cisco webex_meetings_server 2.7_mr1 Yes
Application cisco webex_meetings_server 2.7_mr2 Yes
Application cisco webex_meetings_server 2.7_mr2 Yes
References