CVE-2017-6651
Estado: ModificadaAlta (7.5)—
A vulnerability in Cisco WebEx Meetings Server could allow unauthenticated, remote attackers to gain information that could allow them to access scheduled customer meetings. The vulnerability is due to an incomplete configuration of the robots.txt file on customer-hosted WebEx solutions and occurs when the Short URL functionality is not activated. All releases of Cisco WebEx Meetings Server later than release 2.5MR4 provide this functionality. An attacker could exploit this vulnerability via an exposed parameter to search for indexed meeting information.
Leer descripción completaMostrar menos
A successful exploit could allow the attacker to obtain scheduled meeting information and potentially allow the attacker to attend scheduled, customer meetings. This vulnerability affects the following releases of Cisco WebEx Meetings Server: 2.5, 2.6, 2.7, 2.8. Cisco Bug IDs: CSCve25950.
CVSS
- Versión: 3.0
- Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Puntuación base: 7.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 2.02%
- Percentil entre todas las CVEs puntuadas: 80
- Fecha de la puntuación: 7/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-200
- CWE-200
Referencias
- http://www.securityfocus.com/bid/98387
- http://www.securitytracker.com/id/1038459
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170510-cwms
- http://www.securityfocus.com/bid/98387
- http://www.securitytracker.com/id/1038459
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170510-cwms
JSON original (NVD)
Mostrar
{
"id": "CVE-2017-6651",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "NONE",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.0",
"baseScore": 7.5,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 3.6,
"exploitabilityScore": 3.9
}
]
},
"affected": [
{
"source": "psirt@cisco.com",
"affectedData": [
{
"vendor": "n/a",
"product": "Cisco WebEx Meetings Server",
"versions": [
{
"status": "affected",
"version": "Cisco WebEx Meetings Server"
}
]
}
]
}
],
"published": "2017-05-16T17:29:00.357",
"references": [
{
"url": "http://www.securityfocus.com/bid/98387",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "psirt@cisco.com"
},
{
"url": "http://www.securitytracker.com/id/1038459",
"source": "psirt@cisco.com"
},
{
"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170510-cwms",
"tags": [
"Vendor Advisory"
],
"source": "psirt@cisco.com"
},
{
"url": "http://www.securityfocus.com/bid/98387",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securitytracker.com/id/1038459",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170510-cwms",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Secondary",
"source": "psirt@cisco.com",
"description": [
{
"lang": "en",
"value": "CWE-200"
}
]
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-200"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in Cisco WebEx Meetings Server could allow unauthenticated, remote attackers to gain information that could allow them to access scheduled customer meetings. The vulnerability is due to an incomplete configuration of the robots.txt file on customer-hosted WebEx solutions and occurs when the Short URL functionality is not activated. All releases of Cisco WebEx Meetings Server later than release 2.5MR4 provide this functionality. An attacker could exploit this vulnerability via an exposed parameter to search for indexed meeting information. A successful exploit could allow the attacker to obtain scheduled meeting information and potentially allow the attacker to attend scheduled, customer meetings. This vulnerability affects the following releases of Cisco WebEx Meetings Server: 2.5, 2.6, 2.7, 2.8. Cisco Bug IDs: CSCve25950."
},
{
"lang": "es",
"value": "Una vulnerabilidad en WebEx Meetings Server de Cisco, podría permitir que los atacantes remotos no autenticados consigan información que podría permitirles acceder a las reuniones programadas del cliente. La vulnerabilidad es debido a una configuración incompleta del archivo robots.txt en las soluciones WebEx alojadas por el cliente y se produce cuando la funcionalidad Short URL no está activada. Todas las versiones de WebEx Meetings Server de Cisco posteriores a versión 2.5MR4 proporcionan esta funcionalidad. Un atacante podría explotar esta vulnerabilidad por medio de un parámetro expuesto para buscar información de reunión indexada. Una explotación con éxito podría permitir al atacante obtener información programada de la reunión y potencialmente permitir que el atacante asista a las reuniones programadas de los clientes. Esta vulnerabilidad afecta a las siguientes versiones de WebEx Meetings Server de Cisco: 2.5, 2.6, 2.7, 2.8. ID de bug de Cisco: CSCve25950."
}
],
"lastModified": "2026-06-17T01:22:43.870",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:webex_meetings_server:2.5.1.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D5C7BE43-0F81-4550-813E-66D0844E9291"
},
{
"criteria": "cpe:2.3:a:cisco:webex_meetings_server:2.5.1.29:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9043AE98-9A13-46F8-8E8A-BEC9E8EE0843"
},
{
"criteria": "cpe:2.3:a:cisco:webex_meetings_server:2.5.99.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A8289371-84B7-4342-9EA6-2844A9C5DCDB"
},
{
"criteria": "cpe:2.3:a:cisco:webex_meetings_server:2.5_base:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9F4AF5A4-1B99-43F8-A659-7C57B033F2A2"
},
{
"criteria": "cpe:2.3:a:cisco:webex_meetings_server:2.5_mr1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2F492431-5AE7-439F-81F1-B96EAD773E0E"
},
{
"criteria": "cpe:2.3:a:cisco:webex_meetings_server:2.5_mr2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2EC640D5-C840-4ABB-BD22-9B60BBFE8DD2"
},
{
"criteria": "cpe:2.3:a:cisco:webex_meetings_server:2.5_mr2:patch1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9C9AC0A6-754F-4E20-A1E5-FBEC975D6B9B"
},
{
"criteria": "cpe:2.3:a:cisco:webex_meetings_server:2.5_mr3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FEB2094F-B0E1-4129-BFD6-9FE1687B0AA9"
},
{
"criteria": "cpe:2.3:a:cisco:webex_meetings_server:2.5_mr4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "16B75EA6-516D-4550-B83D-E0EFDAA25208"
},
{
"criteria": "cpe:2.3:a:cisco:webex_meetings_server:2.5_mr5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "48A2A712-E8FD-460F-9A3C-3760082B8920"
},
{
"criteria": "cpe:2.3:a:cisco:webex_meetings_server:2.5_mr5:patch1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "932F97E6-5C33-45E4-A425-C511A4D875EE"
},
{
"criteria": "cpe:2.3:a:cisco:webex_meetings_server:2.5_mr6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8F6F5080-355B-4A85-8DF4-D75D6A550C6E"
},
{
"criteria": "cpe:2.3:a:cisco:webex_meetings_server:2.5_mr6:patch_1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2EC4CC18-3321-468F-8350-9304D4F7CCE4"
},
{
"criteria": "cpe:2.3:a:cisco:webex_meetings_server:2.5_mr6:patch2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4E30AA8C-23DB-4190-A82F-EC35C2D0A7A4"
},
{
"criteria": "cpe:2.3:a:cisco:webex_meetings_server:2.5_mr6:patch3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ABE8D8DD-7496-4F19-AC41-C3EE6B1771A6"
},
{
"criteria": "cpe:2.3:a:cisco:webex_meetings_server:2.5_mr6:patch4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E72E0470-E136-4053-9CFB-10F1593BBA5A"
},
{
"criteria": "cpe:2.3:a:cisco:webex_meetings_server:2.6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F8745FD6-B0B3-46A9-9254-7B13877D7080"
},
{
"criteria": "cpe:2.3:a:cisco:webex_meetings_server:2.6.1.39:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "794B669D-5A30-49CA-9F35-8F7AA5A2DF62"
},
{
"criteria": "cpe:2.3:a:cisco:webex_meetings_server:2.6_mr1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9881CF16-F617-48DA-8CB8-08C3D943CCD6"
},
{
"criteria": "cpe:2.3:a:cisco:webex_meetings_server:2.6_mr1:patch1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "368C0D98-DFFA-434E-8416-49F5862D20B3"
},
{
"criteria": "cpe:2.3:a:cisco:webex_meetings_server:2.6_mr2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4FFFB01B-1B4F-4072-A68C-98C538DE34ED"
},
{
"criteria": "cpe:2.3:a:cisco:webex_meetings_server:2.6_mr2:patch1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9B3F8E05-F2F7-4477-8237-4561A3BE4D91"
},
{
"criteria": "cpe:2.3:a:cisco:webex_meetings_server:2.6_mr3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9309C030-2F02-4E7E-B3E3-035B93DD1E0A"
},
{
"criteria": "cpe:2.3:a:cisco:webex_meetings_server:2.6_mr3:patch1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D8309806-58A6-442D-AAA2-C368A28855DB"
},
{
"criteria": "cpe:2.3:a:cisco:webex_meetings_server:2.6_mr3:patch2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D4A53388-C0C8-41FE-A7D1-670B9B17C02D"
},
{
"criteria": "cpe:2.3:a:cisco:webex_meetings_server:2.7.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ABA0048F-B88D-47F6-89D6-B7EDDECBF700"
},
{
"criteria": "cpe:2.3:a:cisco:webex_meetings_server:2.7_base:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "30ECA8FE-D587-4692-AA90-9706E44BAC1D"
},
{
"criteria": "cpe:2.3:a:cisco:webex_meetings_server:2.7_mr1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6DCD22A8-7E04-4782-AEB2-07878925A2AF"
},
{
"criteria": "cpe:2.3:a:cisco:webex_meetings_server:2.7_mr1:patch1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "42642F32-7B85-4CDE-A40E-A309FC98D35D"
},
{
"criteria": "cpe:2.3:a:cisco:webex_meetings_server:2.7_mr2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "396253A5-EC5F-429B-ABF3-20CB0A56E658"
},
{
"criteria": "cpe:2.3:a:cisco:webex_meetings_server:2.7_mr2:patch1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E669D6E2-300B-4A4D-8A71-4B4FA447185E"
},
{
"criteria": "cpe:2.3:a:cisco:webex_meetings_server:2.8_base:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "04698E83-4906-4FD9-81C1-955A6D770898"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "psirt@cisco.com"
}