Lucene search
CiscoCVE-2013-3438HistoryJul 24, 2013 - 12:01 p.m.
CVE-2013-3438
2013-07-2412:01:57
CWE-264
cisco
web.nvd.nist.gov
23
cisco
unified meetingplace
web conferencing
security
vulnerability
cve-2013-3438
nvd
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.9
Confidence
Low
EPSS
0.002
Percentile
58.8%
The web framework in the server in Cisco Unified MeetingPlace Web Conferencing allows remote attackers to bypass intended access restrictions and read unspecified web pages via crafted parameters, aka Bug ID CSCuh86385.
Affected configurations
Node
ciscounified_meetingplace_web_conferencingMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | unified_meetingplace_web_conferencing | - | cpe:/a:cisco:unified_meetingplace_web_conferencing:-::: |
Related
nvd
nvd
CVE-2013-3438
2013-07-24 12:01:57
cvelist
cvelist
CVE-2013-3438
2013-07-24 01:00:00
prion
prion
Design/Logic Flaw
2013-07-24 12:01:00
cisco
cisco
Cisco Unified MeetingPlace Web Conferencing Authorization Bypass Vulnerability
2013-07-23 21:02:39
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.9
Confidence
Low
EPSS
0.002
Percentile
58.8%
Related for CVE-2013-3438