# CVE-2017-3795: Cisco WebEx Meetings Server arbitrary password change

Source: https://junglewise.ai/threats/cve-2017-3795-cisco-webex-meetings-server-arbitrary-password-change  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2017-01-26. Updated: 2026-05-13  
License: CC BY 4.0 with a link back

CVE-2017-3795 · Severity: medium · CVSS 5.4 · Published 2017-01-26

A vulnerability in Cisco WebEx Meetings Server allows a logged-in user to change the passwords of other non-administrative users. This product is an on-premise conferencing solution for audio, video, and web meetings. If exploited, an attacker could gain unauthorized access to other employees' accounts, potentially leading to the exposure of sensitive meeting data or corporate communications.

Technologies: [Cisco Webex Meetings Server](https://junglewise.ai/threats/technologies/webex-meetings-server). Vendors: [Cisco](https://junglewise.ai/threats/vendors/cisco).

## Quick answers

**Is CVE-2017-3795 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2017-3795 being exploited in the wild.

**How severe is CVE-2017-3795?** Medium severity, with a CVSS score of 5.4, published 26 January 2017.

**Which products and versions are affected?** Cisco WebEx Meetings Server 2.6.

**Is there a fix for CVE-2017-3795?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2017-3795 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2017-3795?** Check whether you run Cisco Webex Meetings Server. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

An improper authentication vulnerability (CWE-287/CWE-255) in Cisco WebEx Meetings Server is caused by insufficient parameter string security. An authenticated, remote attacker can exploit this by creating a password-protected meeting and manipulating system-provided parameters to trigger a password change for a targeted non-administrative user. Successful exploitation allows the attacker to reset the password of any non-admin account. The vulnerability is fixed in version 2.7.1.12.

## Affected products

- Cisco WebEx Meetings Server 2.6

## Timeline

- 2017-01-18: advisory: Initial Cisco advisory release
- 2017-01-26: disclosed: NVD publication date

## References

- [http://www.securityfocus.com/bid/95643](http://www.securityfocus.com/bid/95643)
- [http://www.securitytracker.com/id/1037650](http://www.securitytracker.com/id/1037650)
- [https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170118-wms1](https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170118-wms1)

## Related threats

- [Cisco WebEx Meetings Server information disclosure in admin server FQDN](https://junglewise.ai/threats/cve-2017-3797-cisco-webex-meetings-server-information-disclosure-in-admin-server)
- [Cisco WebEx Meetings Server command injection in interactive bash](https://junglewise.ai/threats/cve-2017-3796-cisco-webex-meetings-server-command-injection-in-interactive-bash)
- [Cisco WebEx Meetings Server CSRF in Administration pages](https://junglewise.ai/threats/cve-2017-3794-cisco-webex-meetings-server-csrf-in-administration-pages)