CVE-2013-1168

2013-04-1110:55:01

[email protected]

web.nvd.nist.gov

CVSS2

7.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

AI Score

6.5

Confidence

High

EPSS

0.002

Percentile

61.2%

JSON

The web server in Cisco Unified MeetingPlace Application Server 7.x before 7.1MR1 Patch 2, 8.0 before 8.0MR1 Patch 1, and 8.5 before 8.5MR3 Patch 1 does not invalidate a session upon a logout action, which makes it easier for remote attackers to hijack sessions by leveraging knowledge of a session cookie, aka Bug ID CSCuc64885.

Affected configurations

Nvd

Node

ciscounified_meetingplaceMatch7.0

ciscounified_meetingplaceMatch7.0.1

ciscounified_meetingplaceMatch7.0.2

ciscounified_meetingplaceMatch7.0.2mr1

ciscounified_meetingplaceMatch7.0.3

ciscounified_meetingplaceMatch7.0.3mr2

ciscounified_meetingplaceMatch7.1

ciscounified_meetingplaceMatch7.1mr1

Node

ciscounified_meetingplaceMatch8.0

ciscounified_meetingplaceMatch8.0mr1

Node

ciscounified_meetingplaceMatch8.5

ciscounified_meetingplaceMatch8.5.1

ciscounified_meetingplaceMatch8.5.2

ciscounified_meetingplaceMatch8.5.3

VendorProductVersionCPE
ciscounified_meetingplace7.0cpe:2.3:a:cisco:unified_meetingplace:7.0:*:*:*:*:*:*:*
ciscounified_meetingplace7.0.1cpe:2.3:a:cisco:unified_meetingplace:7.0.1:*:*:*:*:*:*:*
ciscounified_meetingplace7.0.2cpe:2.3:a:cisco:unified_meetingplace:7.0.2:*:*:*:*:*:*:*
ciscounified_meetingplace7.0.2cpe:2.3:a:cisco:unified_meetingplace:7.0.2:mr1:*:*:*:*:*:*
ciscounified_meetingplace7.0.3cpe:2.3:a:cisco:unified_meetingplace:7.0.3:*:*:*:*:*:*:*
ciscounified_meetingplace7.0.3cpe:2.3:a:cisco:unified_meetingplace:7.0.3:mr2:*:*:*:*:*:*
ciscounified_meetingplace7.1cpe:2.3:a:cisco:unified_meetingplace:7.1:*:*:*:*:*:*:*
ciscounified_meetingplace7.1cpe:2.3:a:cisco:unified_meetingplace:7.1:mr1:*:*:*:*:*:*
ciscounified_meetingplace8.0cpe:2.3:a:cisco:unified_meetingplace:8.0:*:*:*:*:*:*:*
ciscounified_meetingplace8.0cpe:2.3:a:cisco:unified_meetingplace:8.0:mr1:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	unified_meetingplace	7.0	cpe:2.3:a:cisco:unified_meetingplace:7.0:::::::*
cisco	unified_meetingplace	7.0.1	cpe:2.3:a:cisco:unified_meetingplace:7.0.1:::::::*
cisco	unified_meetingplace	7.0.2	cpe:2.3:a:cisco:unified_meetingplace:7.0.2:::::::*
cisco	unified_meetingplace	7.0.2	cpe:2.3:a:cisco:unified_meetingplace:7.0.2:mr1::::::
cisco	unified_meetingplace	7.0.3	cpe:2.3:a:cisco:unified_meetingplace:7.0.3:::::::*
cisco	unified_meetingplace	7.0.3	cpe:2.3:a:cisco:unified_meetingplace:7.0.3:mr2::::::
cisco	unified_meetingplace	7.1	cpe:2.3:a:cisco:unified_meetingplace:7.1:::::::*
cisco	unified_meetingplace	7.1	cpe:2.3:a:cisco:unified_meetingplace:7.1:mr1::::::
cisco	unified_meetingplace	8.0	cpe:2.3:a:cisco:unified_meetingplace:8.0:::::::*
cisco	unified_meetingplace	8.0	cpe:2.3:a:cisco:unified_meetingplace:8.0:mr1::::::