CVE-2013-6709

The registration component in Cisco WebEx Training Center provides the training-session URL before payment is completed, which allows remote attackers to bypass intended access restrictions and join an audio conference by entering credential fields from this URL, aka Bug ID CSCul57111.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:N/A:N
ciscoCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 50%
VendorProductVersion
ciscowebex_training_center
-
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6709
http://tools.cisco.com/security/center/viewAlert.x?alertId=32153
http://www.securitytracker.com/id/1029492
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6709
http://tools.cisco.com/security/center/viewAlert.x?alertId=32153
http://www.securitytracker.com/id/1029492