CVE-2015-0589

Published: Feb 7, 2015Modified: May 6, 2026

9.0

Vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Exploitability: 8.0 / Impact: 10.0

Source: NVD

Description

The administrative web interface in Cisco WebEx Meetings Server 1.0 through 1.5 allows remote authenticated users to execute arbitrary OS commands with root privileges via unspecified fields, aka Bug ID CSCuj40460.

Affected (3)

Products: Cisco: Webex Meetings Server

Cisco

1 product

Webex Meetings Server

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Cisco Webex Meetings Server	Version 1.0
Cisco Webex Meetings Server	Version 1.1
Cisco Webex Meetings Server	Version 1.5

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (10)

http://secunia.com/advisories/62799

Source: psirt@cisco.com

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150204-wbx

Source: psirt@cisco.com

Vendor Advisory

http://www.securityfocus.com/bid/72493

Source: psirt@cisco.com

http://www.securitytracker.com/id/1031692

Source: psirt@cisco.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/100719

Source: psirt@cisco.com

http://secunia.com/advisories/62799