Is CVE-2017-3797 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2017-3797 being exploited in the wild.

How severe is CVE-2017-3797?

Medium severity, with a CVSS score of 5.3, published 26 January 2017.

Which products and versions are affected?

Cisco Webex Meetings Server 2.7.

Is there a fix for CVE-2017-3797?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2017-3797 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2017-3797?

Check whether you run Cisco Webex Meetings Server at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2017-3797: Cisco WebEx Meetings Server information disclosure in admin server FQDN

CVE-2017-3797 · Severity: medium · CVSS 5.3 · Published 2017-01-26

Cisco WebEx Meetings Server is a private cloud solution for hosting online meetings and collaboration. A vulnerability in this server could allow an unauthorized person to see the internal web address (domain name) of the administration server. While this does not grant direct access to meeting data, it provides an attacker with technical details about the internal network structure that could be used to plan further attacks.

Technologies: Cisco Webex Meetings Server. Vendors: Cisco.

Quick answers

Is CVE-2017-3797 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2017-3797 being exploited in the wild.
How severe is CVE-2017-3797?: Medium severity, with a CVSS score of 5.3, published 26 January 2017.
Which products and versions are affected?: Cisco Webex Meetings Server 2.7.
Is there a fix for CVE-2017-3797?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2017-3797 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2017-3797?: Check whether you run Cisco Webex Meetings Server at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An information disclosure vulnerability (CWE-200) exists in Cisco WebEx Meetings Server due to insufficient masking of sensitive data in HTTP responses. A remote, unauthenticated attacker can exploit this by sending specific HTTP requests to the affected system. Successful exploitation allows the attacker to retrieve the fully qualified domain name (FQDN) of the administration server. This vulnerability affects version 2.7; Cisco has released software updates to address the issue, and no workarounds are available.

Affected products

Cisco WebEx Meetings Server 2.7

Timeline

2017-01-18: advisory: Initial Cisco advisory release
2017-01-26: disclosed: NVD publication date

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.