CVE-2015-4209

Cisco WebEx Meeting Center does not properly determine authorization for reading a host calendar, which allows remote attackers to obtain sensitive information by obtaining a list of all meetings and then sending a calendar request for each one, aka Bug ID CSCur23913.

• CWE-200

• http://tools.cisco.com/security/center/viewAlert.x?alertId=39459Vendor Advisory
• http://www.securityfocus.com/bid/75351Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1032705Third Party Advisory, VDB Entry
• http://tools.cisco.com/security/center/viewAlert.x?alertId=39459Vendor Advisory
• http://www.securityfocus.com/bid/75351Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1032705Third Party Advisory, VDB Entry

Published

Jun 23, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-4203Race condition in Cisco IOS 12.2SCH in the Performance Routi…
• CVE-2015-4204Memory leak in Cisco IOS 12.2 in the Performance Routing Eng…
• CVE-2015-4205Cisco IOS XR 5.3.1 on ASR 9000 devices allows remote attacke…
• CVE-2015-4206Cisco Unified Communications Manager (UCM) 8.0 through 8.6 a…
• CVE-2015-4207Cisco WebEx Meeting Center places a meeting's access number …
• CVE-2015-4208Cisco WebEx Meeting Center does not properly restrict the co…
• CVE-2015-4210Cross-site scripting (XSS) vulnerability in Cisco WebEx Meet…
• CVE-2015-4211Cisco AnyConnect Secure Mobility Client 3.1(60) on Windows d…
• CVE-2015-4212Cisco WebEx Meeting Center allows remote attackers to obtain…
• CVE-2015-4213Cisco NX-OS 1.1(1g) on Nexus 9000 devices allows remote auth…
• CVE-2015-4214Cisco Unified MeetingPlace 8.6(1.2) and 8.6(1.9) allows remo…
• CVE-2015-4215Cisco Wireless LAN Controller (WLC) devices with software 7.…