CVE-2017-12297 (CNNVD-201711-1237)
中文标题:
Cisco WebEx Meeting Center 安全漏洞
英文标题:
A vulnerability in Cisco WebEx Meeting Center could allow an authenticated, remote attacker to initi...
漏洞描述
中文描述:
Cisco WebEx Meeting Center是美国思科（Cisco）公司的一套WebEx会议解决方案中的网络在线会议产品。该产品通过电子邮件或即时消息（IM）邀请其他人加入会议，支持在线产品演示、信息共享等。 Cisco WebEx Meeting Center中存在安全漏洞，该漏洞源于程序没有充分的对指向Cisco WebEx Meeting Center的HTTP流量执行访问控制。远程攻击者可通过向Cisco WebEx Meeting Center发送恶意的URL利用该漏洞连接到任意主机。
英文描述:
A vulnerability in Cisco WebEx Meeting Center could allow an authenticated, remote attacker to initiate connections to arbitrary hosts, aka a "URL Redirection Vulnerability." The vulnerability is due to insufficient access control for HTTP traffic directed to the Cisco WebEx Meeting Center. An attacker could exploit this vulnerability by sending a malicious URL to the Cisco WebEx Meeting Center. An exploit could allow the attacker to connect to arbitrary hosts. Cisco Bug IDs: CSCvf63843.
CWE类型:
标签:
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| cisco | webex_meeting_center | t30 | - | - |
cpe:2.3:a:cisco:webex_meeting_center:t30:sp7:*:*:*:*:*:*
|
| cisco | webex_meeting_center | t31 | - | - |
cpe:2.3:a:cisco:webex_meeting_center:t31:sp8:*:*:*:*:*:*
|
| cisco | webex_meeting_center | t32 | - | - |
cpe:2.3:a:cisco:webex_meeting_center:t32:*:*:*:*:*:*:*
|
| cisco | webex_meeting_center | t32.3 | - | - |
cpe:2.3:a:cisco:webex_meeting_center:t32.3:*:*:*:*:*:*:*
|
| cisco | webex_meeting_center | t32.4 | - | - |
cpe:2.3:a:cisco:webex_meeting_center:t32.4:*:*:*:*:*:*:*
|
| cisco | webex_meeting_center | t32.6 | - | - |
cpe:2.3:a:cisco:webex_meeting_center:t32.6:*:*:*:*:*:*:*
|
| cisco | webex_meeting_center | t32.7 | - | - |
cpe:2.3:a:cisco:webex_meeting_center:t32.7:*:*:*:*:*:*:*
|
| cisco | webex_meeting_center | t32.8 | - | - |
cpe:2.3:a:cisco:webex_meeting_center:t32.8:*:*:*:*:*:*:*
|
解决方案
中文解决方案:
英文解决方案:
临时解决方案:
CVSS评分详情
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N
时间信息
利用信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2017-12297 |
2025-11-11 15:19:17 | 2025-11-11 07:34:33 |
| NVD | nvd_CVE-2017-12297 |
2025-11-11 14:55:34 | 2025-11-11 07:43:12 |
| CNNVD | cnnvd_CNNVD-201711-1237 |
2025-11-11 15:09:56 | 2025-11-11 07:53:22 |
版本与语言
安全公告
变更历史
查看详细变更
- vulnerability_type: 未提取 -> 输入验证错误
- cnnvd_id: 未提取 -> CNNVD-201711-1237
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
查看详细变更
- cvss_score: 未提取 -> 5.0
- cvss_vector: NOT_EXTRACTED -> CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N
- cvss_version: NOT_EXTRACTED -> 3.0
- affected_products_count: 0 -> 8
- data_sources: ['cve'] -> ['cve', 'nvd']