CVE:CVE-2017-3880
CNNVD:CNNVD-201703-841
Cisco WebEx Meetings Server（CWMS）是美国思科（Cisco）公司的WebEx会议方案中的一套包含音频、视频和Web会议的多功能会议解决方案。
CWMS中存在身份验证绕过漏洞。远程攻击者可通过伪造合法用户利用该漏洞访问受限制的会议信息。
solution:Upgrade cisco webex_meetings_server to a higher version than 2.5.1.5,2.5.1.29,2.5.99.2,2.5_base,2.5_mr1,2.5_mr2,2.5_mr2:patch_1,2.5_mr3,2.5_mr4,2.5_mr5,2.5_mr5:patch_1,2.5_mr6,2.5_mr6:patch_1,2.5_mr6:patch_2,2.5_mr6:patch_3,2.5_mr6:patch_4,2.6.0,2.6.1.39,2.6_mr1,2.6_mr1:patch_1,2.6_mr2,2.6_mr2:patch_1,2.6_mr3,2.6_mr3:patch_1,2.6_mr3:patch_2,2.7.1,2.7_base,2.7_mr1,2.7_mr1:patch_1,2.7_mr2,2.7_mr2:patch_1,and avoid the version 2.5.1.5,2.5.1.29,2.5.99.2,2.5_base,2.5_mr1,2.5_mr2,2.5_mr2:patch_1,2.5_mr3,2.5_mr4,2.5_mr5,2.5_mr5:patch_1,2.5_mr6,2.5_mr6:patch_1,2.5_mr6:patch_2,2.5_mr6:patch_3,2.5_mr6:patch_4,2.6.0,2.6.1.39,2.6_mr1,2.6_mr1:patch_1,2.6_mr2,2.6_mr2:patch_1,2.6_mr3,2.6_mr3:patch_1,2.6_mr3:patch_2,2.7.1,2.7_base,2.7_mr1,2.7_mr1:patch_1,2.7_mr2,2.7_mr2:patch_1