CVE-2016-1410 Information disclosure in n/a
Remote attackers can determine username validity by attending or hosting meetings, exposing sensitive user information.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2016-1410?
CVE-2016-1410 is a high-severity vulnerability in n/a, published on 28 May 2016. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Cisco WebEx Meeting Center Original Release Base allows remote attackers to obtain sensitive information about username validity by (1) attending or (2) hosting a meeting, aka Bug ID CSCux84312.
Weakness: CWE-200
Which versions are affected by CVE-2016-1410?
It affects 1 product.
Products include Cisco Webex Meeting Center.
How do I fix CVE-2016-1410?
No fix has been published for CVE-2016-1410 yet. Limit exposure of the affected software until one is available.
Is CVE-2016-1410 being exploited?
There is no known exploitation of CVE-2016-1410 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-qc97-hvq6-j797.