A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to access sensitive data about the…

Description

A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to access sensitive data about the application. An attacker could exploit this vulnerability to obtain information to conduct additional reconnaissance attacks. The vulnerability is due to a design flaw in Cisco WebEx Meetings Server that could allow an attacker who is authenticated as root to gain shared secrets. An attacker could exploit the vulnerability by accessing the root account and viewing sensitive information. Successful exploitation could allow the attacker to discover sensitive information about the application. Cisco Bug IDs: CSCvg42664.

Scores

EPSS (exploitation in 30 days)

1.2% · top 31% of all CVEs (3 Nov 2026)

CISA SSVC

Exploitation: none · Automatable: no · Technical impact: partial

The list uses the assigner's score when there is one, then CISA's, then NVD's: Low 2.7.

Weakness

• CWE-200 (opens in a new tab)All about CWE-200 and its CVEs

Affected products

• Cisco WebEx Meetings Server

  • affected Cisco WebEx Meetings Server

References (3)

• 102722 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180117-wms1 (opens in a new tab)x_refsource_CONFIRMx_transferred
• 1040235 (opens in a new tab)vdb-entryx_refsource_SECTRACKx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2018-0109](https://trackcve.app/badge/CVE-2018-0109.svg)](https://trackcve.app/cve/CVE-2018-0109)

Record last updated 2 Dec 2024, 21:35 UTC.