Lucene search
CiscoCVE-2013-6965HistoryDec 14, 2013 - 10:55 p.m.
CVE-2013-6965
2013-12-1422:55:14
CWE-264
cisco
web.nvd.nist.gov
22
cve-2013-6965
cisco
webex
training center
remote attackers
access restrictions
audio conference
cscul36183
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.9
Confidence
Low
EPSS
0.003
Percentile
69.0%
The registration component in Cisco WebEx Training Center provides the training-session URL before e-mail confirmation is completed, which allows remote attackers to bypass intended access restrictions and join an audio conference by entering credential fields from this URL, aka Bug ID CSCul36183.
Affected configurations
Node
ciscowebex_training_centerMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | webex_training_center | - | cpe:2.3:a:cisco:webex_training_center:-:*:*:*:*:*:*:* |
Related
cisco
cisco
prion
prion
Design/Logic Flaw
2013-12-14 22:55:00
nvd
nvd
CVE-2013-6965
2013-12-14 22:55:14
cvelist
cvelist
CVE-2013-6965
2013-12-14 22:00:00
seebug
seebug
Cisco WebEx Training Center Email验证绕过音频会议加入漏洞
2013-12-18 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.9
Confidence
Low
EPSS
0.003
Percentile
69.0%
Related for CVE-2013-6965