Cisco WebEx Meeting Center GET Parameter Vulnerability (CVE-2015-4208)

Cisco WebEx Meeting Center GET Parameter Vulnerability (CVE-2015-4208)
Cisco WebEx Meeting Center GET Parameter Vulnerability (CVE-2015-4208)

Release date:
Updated on:

Affected Systems:

Cisco WebEx Meeting Center

Description:

CVE (CAN) ID: CVE-2015-4208

Cisco WebEx Meetings is a network conferencing solution.

Cisco WebEx Meeting Center does not properly restrict the content of URLs in GET requests. Remote attackers can exploit this vulnerability to obtain sensitive information or execute SQL injection attacks.

<* Source: Cisco
*>

Suggestion:

Vendor patch:

Cisco
-----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://tools.cisco.com/security/center/viewAlert.x? AlertId = 39458

This article permanently updates the link address: