CVE-2013-1169

2013-04-1110:55:02

CWE-264

cisco

web.nvd.nist.gov

cisco

meetingplace

web conferencing

server

cve-2013-1169

patch

security vulnerability

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.7

Confidence

Low

EPSS

0.003

Percentile

71.9%

JSON

Cisco Unified MeetingPlace Web Conferencing Server 7.x before 7.1MR1 Patch 2, 8.0 before 8.0MR1 Patch 2, and 8.5 before 8.5MR3 Patch 1, when the Remember Me option is used, does not properly verify cookies, which allows remote attackers to impersonate users via a crafted login request, aka Bug ID CSCuc64846.

Affected configurations

Nvd

Node

ciscounified_meetingplace_web_conferencing_serverMatch7.1

ciscounified_meetingplace_web_conferencing_serverMatch8.0

ciscounified_meetingplace_web_conferencing_serverMatch8.5

VendorProductVersionCPE
ciscounified_meetingplace_web_conferencing_server7.1cpe:2.3:a:cisco:unified_meetingplace_web_conferencing_server:7.1:*:*:*:*:*:*:*
ciscounified_meetingplace_web_conferencing_server8.0cpe:2.3:a:cisco:unified_meetingplace_web_conferencing_server:8.0:*:*:*:*:*:*:*
ciscounified_meetingplace_web_conferencing_server8.5cpe:2.3:a:cisco:unified_meetingplace_web_conferencing_server:8.5:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	unified_meetingplace_web_conferencing_server	7.1	cpe:2.3:a:cisco:unified_meetingplace_web_conferencing_server:7.1:::::::*
cisco	unified_meetingplace_web_conferencing_server	8.0	cpe:2.3:a:cisco:unified_meetingplace_web_conferencing_server:8.0:::::::*
cisco	unified_meetingplace_web_conferencing_server	8.5	cpe:2.3:a:cisco:unified_meetingplace_web_conferencing_server:8.5:::::::*