CVE-2013-3409

The portal in Cisco Prime Central for Hosted Collaboration Solution HCS places cleartext credentials in temporary files, which allows local users to obtain sensitive information by leveraging weak file permissions to read these files, aka Bug IDs CSCuh33735 and CSCuh34230...

PT-2013-4366

Name of the Vulnerable Software and Affected Versions Cisco Prime Central for Hosted Collaboration Solution HCS affected versions not specified Description The issue allows local users to obtain sensitive information by reading temporary files that contain cleartext credentials due to weak file...

CVE-2013-3409: Undefined Security Weakness

The portal in Cisco Prime Central for Hosted Collaboration Solution HCS places cleartext credentials in temporary files, which allows local users to obtain sensitive information by leveraging weak file permissions to read these files, aka Bug IDs CSCuh33735 and CSCuh34230...

VMWare Zimbra Collaboration Suite replay attack

It's possible to bypass authentication by replaying captured session...

Zimbra Collaboration Suite (ZCS) Session Replay Vulnerability

Product: Zimbra Collaboration Suite Vendor: VMWare Vulnerable Version: 6.0.16 and probably prior Tested Version: 6.0.16 Vendor Notification: 09/03/2013 Public Disclosure: 09/13/2013 Vulnerability Type: Authentication Bypass by Capture-replay CWE-294 CVE: CVE-2013-5119 Discovered and Provided By:...

CVE-2013-4042

Unspecified vulnerability in IBM SPSS Collaboration and Deployment Services 4.2.1 and 5.0 through FP2 allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2013-5370...

CVE-2013-5370

Unspecified vulnerability in IBM SPSS Collaboration and Deployment Services 4.2.1 and 5.0 through FP2 allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2013-4042...

Design/Logic Flaw

Unspecified vulnerability in IBM SPSS Collaboration and Deployment Services 4.2.1 and 5.0 through FP2 allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2013-4042...

Code injection

Unspecified vulnerability in IBM SPSS Collaboration and Deployment Services 4.2.1 and 5.0 through FP2 allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2013-5370...

CVE-2013-5370

Unspecified vulnerability in IBM SPSS Collaboration and Deployment Services 4.2.1 and 5.0 through FP2 allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2013-4042...

CVE-2013-4042

IBM SPSS Collaboration and Deployment Services (CDS) is affected by CVE-2013-4042 and CVE-2013-5370. The IBM security bulletin confirms remote code execution vulnerabilities for all users, impacting CDS versions 4.2.1 and 5.0 up to FP2. The CVSS base score is 10 (network vector, no authentication...

CVE-2013-4042

Unspecified vulnerability in IBM SPSS Collaboration and Deployment Services 4.2.1 and 5.0 through FP2 allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2013-5370...

CVE-2013-5370

IBM SPSS Collaboration and Deployment Services is affected by CVE-2013-5370. The Security Bulletin notes remote code execution vulnerabilities for all users of C&DS, with affected versions 5.0 (up to FP2) and 4.2.1. The CVSS base score is 10 (vector AV:N/AC:L/Au:N/C:C/I:C/A:C). Remediation provid...

PT-2013-5498

Name of the Vulnerable Software and Affected Versions IBM SPSS Collaboration and Deployment Services versions 4.2.1 and 5.0 through FP2 Description The issue allows remote attackers to execute arbitrary code via unknown vectors. Recommendations For version 4.2.1, update to a version that contains...

PT-2013-4810

Name of the Vulnerable Software and Affected Versions IBM SPSS Collaboration and Deployment Services versions 4.2.1 and 5.0 through FP2 Description The issue allows remote attackers to execute arbitrary code via unknown vectors. Recommendations For version 4.2.1, update to a version that contains...

CVE-2013-4042: Undefined Security Weakness

Unspecified vulnerability in IBM SPSS Collaboration and Deployment Services 4.2.1 and 5.0 through FP2 allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2013-5370...

CVE-2013-5370: Undefined Security Weakness

Unspecified vulnerability in IBM SPSS Collaboration and Deployment Services 4.2.1 and 5.0 through FP2 allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2013-4042...

CVE-2013-5119

Zimbra Collaboration Suite ZCS 6.0.16 and earlier allows man-in-the-middle attackers to obtain access by sniffing the network and replaying the ZMAUTHTOKEN token...

Design/Logic Flaw

Zimbra Collaboration Suite ZCS 6.0.16 and earlier allows man-in-the-middle attackers to obtain access by sniffing the network and replaying the ZMAUTHTOKEN token...

CVE-2013-5119

Summary : CVE-2013-5119 affects Zimbra Collaboration Suite (ZCS) 6.0.16 and earlier. Affected component is the authentication/session handling where an attacker can capture a user’s ZM_AUTH_TOKEN and replay it to gain access, enabling a remote impersonation via a man-in-the-middle scenario. The r...