Lucene search

K
cve[email protected]CVE-2013-1205
HistoryOct 03, 2022 - 4:14 p.m.

CVE-2013-1205

2022-10-0316:14:47
CWE-287
web.nvd.nist.gov
19
cve-2013-1205
cisco webex
meetings server
security vulnerability
request authentication
remote attackers
host keys
event passwords

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

7.1 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

56.0%

The Event Center module in Cisco WebEx Meetings Server does not perform request authentication in all intended circumstances, which allows remote attackers to discover host keys and event passwords via crafted URLs, aka Bug ID CSCue62485.

Affected configurations

NVD
Node
ciscowebex_meetings_serverMatch-

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

7.1 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

56.0%

Related for CVE-2013-1205