CVE-2017-12297

A vulnerability in Cisco WebEx Meeting Center could allow an authenticated, remote attacker to initiate connections to arbitrary hosts, aka a "URL Redirection Vulnerability." The vulnerability is due to insufficient access control for HTTP traffic directed to the Cisco WebEx Meeting Center. An attacker could exploit this vulnerability by sending a malicious URL to the Cisco WebEx Meeting Center. An exploit could allow the attacker to connect to arbitrary hosts. Cisco Bug IDs: CSCvf63843.

Score

CVSS 3.0 5.0 Medium

Status

Modified - psirt@cisco.com

Published

2017-11-30

Last modified

2024-08-05

Weaknesses

CWE-20

Affected products

• Webex Meeting Center (Cisco)

References

• http://www.securityfocus.com/bid/101985
• http://www.securitytracker.com/id/1039919
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-wmc