Cisco WebEx One-Click Client Password Encryption - Information Disclosure

Cisco WebEx One-Click Client Password Encryption - Information Disclosure // source: https://www.securityfocus.com/bid/61304/info Cisco WebEx One-Click Client is prone to an information disclosure vulnerability. Successful exploits may allow an attacker to disclose sensitive information such as...

Cisco WebEx One-Click Client Password Encryption - Information Disclosure

// source: https://www.securityfocus.com/bid/61304/info Cisco WebEx One-Click Client is prone to an information disclosure vulnerability. Successful exploits may allow an attacker to disclose sensitive information such as stored passwords; this may aid in further attacks. / WebEx One-Click Regist...

CVE-2013-3392

Multiple cross-site request forgery CSRF vulnerabilities in Cisco WebEx Social allow remote attackers to hijack the authentication of arbitrary users via unspecified vectors, aka Bug IDs CSCuh10405 and CSCuh10355...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Cisco WebEx Social allow remote attackers to hijack the authentication of arbitrary users via unspecified vectors, aka Bug IDs CSCuh10405 and CSCuh10355...

CVE-2013-3392

Multiple cross-site request forgery CSRF vulnerabilities in Cisco WebEx Social allow remote attackers to hijack the authentication of arbitrary users via unspecified vectors, aka Bug IDs CSCuh10405 and CSCuh10355...

CVE-2013-3392

CVE-2013-3392 affects Cisco WebEx Social. The issue stems from insufficient CSRF protections on multiple WebEx Social web pages, enabling an unauthenticated, remote attacker to hijack a user’s session by inducing them to perform unwanted actions. Root cause: CSRF protection gaps that allow arbitr...

Cisco WebEx Social Cross-Site Request Forgery Vulnerability

A vulnerability in multiple web pages of Cisco WebEx Social could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack against the user of the web interface. The vulnerability is due to insufficient CSRF protections. An attacker could exploit this...

Cisco WebEx Meetings Server 信息泄漏漏洞(CVE-2013-1205)

Bugtraq ID:60373 CVE ID:CVE-2013-1205 Cisco WebEx是一款网络会议解决方案 Cisco WebEx Meetings Server事件中心模块存在一个安全漏洞，由于不正确处理特制的请求，允许远程攻击者利用漏洞提交特制的URL获取事件密码和主机KEY 0 Cisco WebEx Meetings Server 1.0 厂商解决方案 用户可联系厂商获取相应的升级程序或补丁： http://www.cisco.com...

CVE-2013-1205

The Event Center module in Cisco WebEx Meetings Server does not perform request authentication in all intended circumstances, which allows remote attackers to discover host keys and event passwords via crafted URLs, aka Bug ID CSCue62485...

Authentication flaw

The Event Center module in Cisco WebEx Meetings Server does not perform request authentication in all intended circumstances, which allows remote attackers to discover host keys and event passwords via crafted URLs, aka Bug ID CSCue62485...

CVE-2013-1205

CVE-2013-1205 affects the Event Center module of Cisco WebEx Meetings Server. The issue is that certain requests are not authenticated, enabling remote attackers to discover host keys and event passwords via crafted URLs. The vulnerability is described in Cisco’s advisory and related CVE records,...

CVE-2013-1205

The Event Center module in Cisco WebEx Meetings Server does not perform request authentication in all intended circumstances, which allows remote attackers to discover host keys and event passwords via crafted URLs, aka Bug ID CSCue62485...

Cisco WebEx Meetings Server Information Disclosure Vulnerability

A vulnerability in the Cisco WebEx Event Center module of the Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to gather event passwords and host keys. The vulnerability is due to a failure to authenticate some user requests. An attacker could exploit this vulnerability...

Cisco WebEx Recording Format Player atas32.dll Integer Overflow (CVE-2012-1336)

A code execution vulnerability has been reported in Cisco WebEx Recording Format WRF Player. The vulnerability is due to an integer overflow leading to a heap buffer overflow when processing WRF files. A remote unauthenticated attacker can leverage this vulnerability by crafting a WRF file and...

Cisco WebEx for iOS 证书验证安全绕过漏洞(CVE-2012-6399)

BUGTRAQ ID: 60155 CVECAN ID: CVE-2012-6399 Cisco WebEx Social是企业协作平台。 Cisco WebEx for iOS 4.1没有正确验证服务器SSL证书，远程攻击者可利用此漏洞通过中间人攻击欺骗服务器并获取敏感信息。 0 Cisco WebEx for iOS 4.1 厂商补丁： Cisco ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.cisco.com/go/psirt...

CVE-2012-6399

Cisco WebEx 4.1 on iOS does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, aka Bug ID CSCud94176...

Code injection

Cisco WebEx 4.1 on iOS does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, aka Bug ID CSCud94176...

CVE-2012-6399

Cisco WebEx 4.1 on iOS is affected by CVE-2012-6399: it does not validate that the server hostname matches the CN/subjectAltName in the X.509 certificate, enabling MITM with an arbitrary valid certificate. Root cause: hostname verification failure in SSL/TLS. Impact per sources: partial confident...

CVE-2012-6399

Cisco WebEx 4.1 on iOS does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, aka Bug ID CSCud94176...

Cisco WebEx未初始化内存读取漏洞

BUGTRAQ ID: 59649 CVECAN ID: CVE-2013-1232 WebEx会议服务是Cisco WebEx管理和维护的托管多媒体会议解决方案。 多个Cisco WebEx产品上的Cisco IOS处理HTTP请求时存在错误，通过发送特制的请求到Cisco WebEx节点，未经身份验证的远程攻击者可利用此漏洞读取未初始化的内存。 0 Cisco IOS 15.3 Cisco WebEx 厂商补丁： Cisco ----- Cisco已经为此发布了一个安全公告（CVE-2013-1232）以及相应补丁: CVE-2013-1232：Cisco WebEx...