Design Flaw in Cisco WebEx Event Center Allows Unauthorized Meeting Access

CVE-2017-12365

Summary

A design flaw in Cisco WebEx Event Center allows an authenticated, remote attacker to query the system for scheduled meetings, including those that are unlisted. This exploitation enables the attacker to view both listed and unlisted meeting information, potentially leading to unauthorized attendance at sensitive meetings. The flaw arises from insufficient restrictions on meeting visibility, posing a significant risk to the confidentiality of event details.

References