Cisco WebEx Meetings Server远程身份验证绕过漏洞(CVE-2013-3448)

BUGTRAQ ID: 61572 CVECAN ID: CVE-2013-3448 Cisco WebEx Meetings是网络会议解决方案。 Cisco WebEx Meetings Server没有检查用户账户是否是有效的，经过身份验证的远程攻击者在账户失效后继续执行会议操作即可绕过目标访问限制。 0 Cisco WebEx Meetings Server 厂商补丁： Cisco ----- Cisco已经为此发布了一个安全公告（CVE-2013-3448）以及相应补丁: CVE-2013-3448：Cisco WebEx Meetings Server Inactive Use...

CVE-2013-3448

Summary: CVE-2013-3448 affects Cisco WebEx Meetings Server. The vulnerability arises because the product does not verify whether a user account is still active, allowing a remote, authenticated attacker to continue performing meeting operations after the user account has been deactivated, effecti...