Auth bypass in Cisco Webex Meetings Server

CVE-2013-1205

The Event Center module in Cisco WebEx Meetings Server does not perform request authentication in all intended circumstances, which allows remote attackers to discover host keys and event passwords via crafted URLs, aka Bug ID CSCue62485.

Vulnerability class: Broken Authentication

EPSS: 0.018 (76.2th percentile) — read the EPSS interpretation.

Affected products

Cisco Webex_meetings_server
N/a — versions n/a

Weakness classification (CWE)

CWE-287 — Improper Authentication

References

psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)