CVE-2013-1169

2013-04-1110:00:00

cisco

www.cve.org

cisco

meetingplace

web server

vulnerability

remote attackers

impersonation

crafted login request

cookie verification

AI Score

6.5

Confidence

Low

EPSS

0.003

Percentile

71.9%

JSON

Cisco Unified MeetingPlace Web Conferencing Server 7.x before 7.1MR1 Patch 2, 8.0 before 8.0MR1 Patch 2, and 8.5 before 8.5MR3 Patch 1, when the Remember Me option is used, does not properly verify cookies, which allows remote attackers to impersonate users via a crafted login request, aka Bug ID CSCuc64846.