3336 matches found
Design/Logic Flaw
The HTTP implementation in Cisco WebEx Node for MCS, WebEx Meetings Server, and WebEx Node for ASR 1000 Series allows remote attackers to read the contents of uninitialized memory locations via a crafted request, aka Bug IDs CSCue36672, CSCue31363, CSCuf17466, and CSCug61252...
CVE-2013-1232
The CVE-2013-1232 vulnerability affects Cisco WebEx Node for MCS, WebEx Meetings Server, and WebEx Node for ASR 1000 Series. The issue arises in the HTTP implementation, where unauthenticated remote attackers can trigger reading of uninitialized memory by sending crafted HTTP requests. Impact is ...
CVE-2013-1232
The HTTP implementation in Cisco WebEx Node for MCS, WebEx Meetings Server, and WebEx Node for ASR 1000 Series allows remote attackers to read the contents of uninitialized memory locations via a crafted request, aka Bug IDs CSCue36672, CSCue31363, CSCuf17466, and CSCug61252...
CVE-2013-1232: Improper Input Validation
The HTTP implementation in Cisco WebEx Node for MCS, WebEx Meetings Server, and WebEx Node for ASR 1000 Series allows remote attackers to read the contents of uninitialized memory locations via a crafted request, aka Bug IDs CSCue36672, CSCue31363, CSCuf17466, and CSCug61252...
CVE-2013-1231
The HTTP implementation in Cisco WebEx Node for MCS and WebEx Meetings Server allows remote attackers to read cache files via a crafted request, aka Bug IDs CSCue36664 and CSCue36629...
Default configuration
The HTTP implementation in Cisco WebEx Node for MCS and WebEx Meetings Server allows remote attackers to read cache files via a crafted request, aka Bug IDs CSCue36664 and CSCue36629...
CVE-2013-1231
The CVE-2013-1231 issue affects Cisco WebEx Node for MCS and WebEx Meetings Server where the HTTP implementation allows remote attackers to read cache files via a crafted request. The root cause is insufficient input validation that enables reading cache directory files. Cisco’s Cisco Security Ad...
CVE-2013-1231
The HTTP implementation in Cisco WebEx Node for MCS and WebEx Meetings Server allows remote attackers to read cache files via a crafted request, aka Bug IDs CSCue36664 and CSCue36629...
CVE-2013-1231: Improper Input Validation
The HTTP implementation in Cisco WebEx Node for MCS and WebEx Meetings Server allows remote attackers to read cache files via a crafted request, aka Bug IDs CSCue36664 and CSCue36629...
Multiple Cisco WebEx Products Cache Directory Read Vulnerability
A vulnerability in multiple Cisco WebEx products could allow an unauthenticated, remote attacker to read files from the cache directory. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by passing a crafted HTTP request to a WebEx node and re...
PT-2013-1311
Name of the Vulnerable Software and Affected Versions Cisco WebEx Meetings Server versions prior to 1.1 Description The issue is related to insufficient entropy in meeting IDs, which can be exploited by remote attackers to bypass authentication and join arbitrary meetings without a password. This...
CVE-2013-1107
The search function in Cisco Webex Social formerly Cisco Quad allows remote authenticated users to read files via unspecified parameters, aka Bug ID CSCud40235...
Code injection
The search function in Cisco Webex Social formerly Cisco Quad allows remote authenticated users to read files via unspecified parameters, aka Bug ID CSCud40235...
CVE-2013-1107
The search function in Cisco Webex Social formerly Cisco Quad allows remote authenticated users to read files via unspecified parameters, aka Bug ID CSCud40235...
CVE-2013-1107
The CVE-2013-1107 case concerns Cisco Webex Social (formerly Cisco Quad). The vulnerability is in the product’s search function, where remote authenticated users could read files via unspecified parameters (Bug ID CSCud40235). The entry has a CVSSv2 base score of 4.0 (Medium) with network attack ...
PT-2013-2879
Name of the Vulnerable Software and Affected Versions Cisco Webex Social affected versions not specified Description The issue concerns the search function in Cisco Webex Social, which allows remote authenticated users to read files via unspecified parameters. Recommendations At the moment, there...
CVE-2013-1107: Exposure of Sensitive Information to an Unauthorized Actor
The search function in Cisco Webex Social formerly Cisco Quad allows remote authenticated users to read files via unspecified parameters, aka Bug ID CSCud40235...
Cisco WebEx Training Center 权限限制绕过漏洞(CVE-2013-1110)
CVE ID:CVE-2013-1110 Cisco WebEx Training Center是一款电子教学,在线培训和在线课堂解决方案。 Cisco WebEx Training Center存在安全漏洞，允许通过验证的远程攻击者利用漏洞提交特制的URL绕过权限限制，禁用或启用培训中心录制功能。 0 Cisco WebEx Training Center 厂商解决方案 用户可参考如下厂商提供的安全公告获得补丁信息： http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1110...
CVE-2013-1110
Cisco WebEx Training Center allow remote authenticated users to bypass intended privilege restrictions and 1 enable or 2 disable training-center recordings via a crafted URL, aka Bug ID CSCzu81065...