Lucene search

CiscoCVE-2013-6709

HistoryDec 14, 2013 - 10:55 p.m.

CVE-2013-6709

2013-12-1422:55:03

CWE-200

cisco

web.nvd.nist.gov

cisco

webex

training center

remote attackers

access restrictions

cve-2013-6709

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.9

Confidence

Low

EPSS

0.001

Percentile

48.3%

JSON

The registration component in Cisco WebEx Training Center provides the training-session URL before payment is completed, which allows remote attackers to bypass intended access restrictions and join an audio conference by entering credential fields from this URL, aka Bug ID CSCul57111.

Affected configurations

Nvd

Node

ciscowebex_training_centerMatch-

VendorProductVersionCPE
ciscowebex_training_center-cpe:2.3:a:cisco:webex_training_center:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	webex_training_center	-	cpe:2.3:a:cisco:webex_training_center:-:::::::*

References

tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6709

tools.cisco.com/security/center/viewAlert.x?alertId=32153

www.securitytracker.com/id/1029492

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.9

Confidence

Low

EPSS

0.001

Percentile

48.3%

JSON

Related for CVE-2013-6709