Lucene search
HistoryJan 17, 2013 - 3:55 p.m.
CVE-2013-1109
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.2
Confidence
Low
EPSS
0.001
Percentile
38.6%
Cross-site request forgery (CSRF) vulnerability in testingLibraryAction.do in the Training Center testing library in Cisco WebEx Training Center allows remote attackers to hijack the authentication of arbitrary users for requests that delete tests, aka Bug ID CSCzu81067.
Affected configurations
Node
ciscowebex_training_centerMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | webex_training_center | - | cpe:2.3:a:cisco:webex_training_center:-:*:*:*:*:*:*:* |
Related
prion
prion
Cross site request forgery (csrf)
2013-01-17 15:55:00
cve
cve
CVE-2013-1109
2013-01-17 15:55:01
cvelist
cvelist
CVE-2013-1109
2013-01-17 15:00:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.2
Confidence
Low
EPSS
0.001
Percentile
38.6%
Related for NVD:CVE-2013-1109