CVE-2013-1108

Cisco WebEx Training Center allows remote authenticated users to remove hands-on lab-session reservations via a crafted URL, aka Bug ID CSCzu81064...

PT-2013-2882

Name of the Vulnerable Software and Affected Versions Cisco WebEx Training Center affected versions not specified Description The issue allows remote authenticated users to bypass intended privilege restrictions. This can lead to enabling or disabling training-center recordings via a crafted URL...

CVE-2013-1110: Undefined Security Weakness

Cisco WebEx Training Center allow remote authenticated users to bypass intended privilege restrictions and 1 enable or 2 disable training-center recordings via a crafted URL, aka Bug ID CSCzu81065...

CVE-2013-1108: Undefined Security Weakness

Cisco WebEx Training Center allows remote authenticated users to remove hands-on lab-session reservations via a crafted URL, aka Bug ID CSCzu81064...

PT-2013-2880

Name of the Vulnerable Software and Affected Versions Cisco WebEx Training Center affected versions not specified Description The issue allows remote authenticated users to remove hands-on lab-session reservations via a crafted URL. Recommendations At the moment, there is no information about a...

CVE-2013-1109

Cisco WebEx Training Center is affected by CVE-2013-1109, a CSRF vulnerability in the Training Center testing library (testingLibraryAction.do) that could allow remote attackers to hijack the authentication of arbitrary users and trigger test deletions. The CVE entry notes a CVSS v2 base score of...

PT-2013-2881

Name of the Vulnerable Software and Affected Versions Cisco WebEx Training Center affected versions not specified Description A cross-site request forgery CSRF issue exists in the Training Center testing library, specifically in the testingLibraryAction.do component. This allows remote attackers ...

CVE-2013-1109: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in testingLibraryAction.do in the Training Center testing library in Cisco WebEx Training Center allows remote attackers to hijack the authentication of arbitrary users for requests that delete tests, aka Bug ID CSCzu81067...