CVE-2018-0110

A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to access the remote support account even after it has been disabled via the web application. The vulnerability is due to a design flaw in Cisco WebEx Meetings Server, which would not disable access to specifically configured user accounts, even after access had been disabled in the web application. An attacker could exploit this vulnerability by connecting to the remote support account, even after it had been disabled at the web application level. An exploit could allow the attacker to modify server configuration and gain access to customer data. Cisco Bug IDs: CSCvg46741.

• CWE-254
• CWE-863

• http://www.securityfocus.com/bid/102773Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040236Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180117-wms2Vendor Advisory
• http://www.securityfocus.com/bid/102773Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040236Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180117-wms2Vendor Advisory

Published

Jan 18, 2018

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-0104A vulnerability in Cisco WebEx Network Recording Player for …
• CVE-2018-0105A vulnerability in the web framework of Cisco Unified Commun…5.3
• CVE-2018-0106A vulnerability in the ConfD server of the Cisco Elastic Ser…3.3
• CVE-2018-0107A vulnerability in the web framework of Cisco Prime Service …
• CVE-2018-0108A vulnerability in Cisco WebEx Meetings Server could allow a…
• CVE-2018-0109A vulnerability in Cisco WebEx Meetings Server could allow a…
• CVE-2018-0111A vulnerability in Cisco WebEx Meetings Server could allow a…
• CVE-2018-0112A vulnerability in Cisco WebEx Business Suite clients, Cisco…
• CVE-2018-0113A vulnerability in an operations script of Cisco UCS Central…
• CVE-2018-0114A vulnerability in the Cisco node-jose open source library b…7.5
• CVE-2018-0115A vulnerability in the CLI of the Cisco StarOS operating sys…
• CVE-2018-0116A vulnerability in the RADIUS authentication module of Cisco…