N/A

A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to access the remote support account even after it has been disabled via the web application. The vulnerability is due to a design flaw in Cisco WebEx Meetings Server, which would not disable access to specifically configured user accounts, even after access had been disabled in the web application. An attacker could exploit this vulnerability by connecting to the remote support account, even after it had been disabled at the web application level. An exploit could allow the attacker to modify server configuration and gain access to customer data. Cisco Bug IDs: CSCvg46741.

N/A

7PK-安全功能

Cisco WebEx Meetings Server 安全漏洞

Cisco WebEx Meetings Server（CWMS）是美国思科（Cisco）公司的WebEx会议方案中的一套包含音频、视频和Web会议的多功能会议解决方案。 CWMS中存在安全漏洞，该漏洞源于程序无法禁用配置用户账户的访问权限。远程攻击者可通过连接远程支持账户利用该漏洞更改服务器配置并获取用户数据的访问权限。

N/A

N/A