Vulnerabilities > CVE-2014-8034 - Credentials Management vulnerability in Cisco Webex Meetings Server 1.5
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN Summary
Cisco WebEx Meetings Server 1.5 presents the same CAPTCHA challenge for each login attempt, which makes it easier for remote attackers to obtain access via a brute-force approach of guessing usernames, aka Bug ID CSCuj40321.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |
Common Weakness Enumeration (CWE)
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8034
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8034
- http://tools.cisco.com/security/center/viewAlert.x?alertId=36990
- http://tools.cisco.com/security/center/viewAlert.x?alertId=36990
- http://www.securityfocus.com/bid/71978
- http://www.securityfocus.com/bid/71978
- http://www.securitytracker.com/id/1031543
- http://www.securitytracker.com/id/1031543
- https://exchange.xforce.ibmcloud.com/vulnerabilities/100552
- https://exchange.xforce.ibmcloud.com/vulnerabilities/100552