CVE-2013-6965

The registration component in Cisco WebEx Training Center provides the training-session URL before e-mail confirmation is completed, which allows remote attackers to bypass intended access restrictions and join an audio conference by entering credential fields from this URL, aka Bug ID CSCul36183.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:N/A:N
ciscoCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 64%
VendorProductVersion
ciscowebex_training_center
-
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://osvdb.org/100911
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6965
http://tools.cisco.com/security/center/viewAlert.x?alertId=32157
http://www.securityfocus.com/bid/64281
http://www.securitytracker.com/id/1029492
https://exchange.xforce.ibmcloud.com/vulnerabilities/89691
http://osvdb.org/100911
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6965
http://tools.cisco.com/security/center/viewAlert.x?alertId=32157
http://www.securityfocus.com/bid/64281
http://www.securitytracker.com/id/1029492
https://exchange.xforce.ibmcloud.com/vulnerabilities/89691