CVE-2013-1245

2013-05-1601:00:00

cisco

www.cve.org

cisco webex social

user management

client-side validation

access restrictions

bug id

cscue67190

AI Score

6.3

Confidence

Low

EPSS

0.001

Percentile

30.1%

JSON

The user-management page in Cisco WebEx Social relies on client-side validation of values in the Screen Name, First Name, Middle Name, Last Name, Email Address, and Job Title fields, which allows remote authenticated users to bypass intended access restrictions via crafted requests, aka Bug ID CSCue67190.

References

tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1245