CVE-2018-0109 - CVE House
Back to Database
Status published Low CVE-2018-0109

A vulnerability in Cisco WebEx Meetings Server could allow an...

Vulnerability Description

A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to access sensitive data about the application. An attacker could exploit this vulnerability to obtain information to conduct additional reconnaissance attacks. The vulnerability is due to a design flaw in Cisco WebEx Meetings Server that could allow an attacker who is authenticated as root to gain shared secrets. An attacker could exploit the vulnerability by accessing the root account and viewing sensitive information. Successful exploitation could allow the attacker to discover sensitive information about the application. Cisco Bug IDs: CSCvg42664.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-0109

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

Affected Software

Cisco WebEx Meetings Server
Vulnerable Versions:
Cisco WebEx Meetings Server

Timeline

Official Publish: January 18th, 2018
Last Modified: December 2nd, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Weaknesses (CWE)