ID de Prueba:	1.3.6.1.4.1.25623.1.0.106530
Categoría:	CISCO
Título:	Cisco Webex Meetings Server Arbitrary Password Change Vulnerability
Resumen:	A vulnerability in Cisco Webex Meetings Server could allow an authenticated,; remote attacker to conduct arbitrary password changes against any non-administrative user.
Descripción:	Summary: A vulnerability in Cisco Webex Meetings Server could allow an authenticated, remote attacker to conduct arbitrary password changes against any non-administrative user. Vulnerability Insight: The vulnerability is due to insufficient parameter string security. An attacker could exploit this vulnerability by creating a password-protected meeting and utilizing system-provided parameters to change a non-administrative user password. Vulnerability Impact: A successful exploit could allow an attacker to change the password of a targeted user. Affected Software/OS: Cisco Webex Meetings Server version 2.6 and prior. Solution: See the referenced vendor advisory for a solution. CVSS Score: 6.5 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2017-3795 BugTraq ID: 95643 http://www.securityfocus.com/bid/95643 http://www.securitytracker.com/id/1037650
Copyright	Copyright (C) 2017 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.