Skip to main content

Webex Training Center CVE-2013-1110

MEDIUM
Permissions, Privileges, and Access Controls (CWE-264)
2013-01-21 psirt@cisco.com
Privilege Escalation Cisco Webex Training Center
4.0
CVSS 2.0 · NVD
Share

Severity by source

NVD PRIMARY
4.0 MEDIUM
AV:N/AC:L/Au:S/C:N/I:P/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:L/Au:S/C:N/I:P/A:N
Attack Vector
Network
Attack Complexity
Low
Confidentiality
None
Integrity
P
Availability
None

Lifecycle Timeline

1
CVE Published
Jan 21, 2013 - 21:55 cve.org
MEDIUM 4.0

DescriptionCVE.org

Cisco WebEx Training Center allow remote authenticated users to bypass intended privilege restrictions and (1) enable or (2) disable training-center recordings via a crafted URL, aka Bug ID CSCzu81065.

AnalysisAI

Cisco WebEx Training Center allow remote authenticated users to bypass intended privilege restrictions and (1) enable or (2) disable training-center recordings via a crafted URL, aka Bug ID. Rated medium severity (CVSS 4.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-264. Cisco WebEx Training Center allow remote authenticated users to bypass intended privilege restrictions and (1) enable or (2) disable training-center recordings via a crafted URL, aka Bug ID CSCzu81065. Affected products include: Cisco Webex Training Center.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Webex Training Center

View all
CVE-2017-6753 HIGH
8.8 Jul 25

A vulnerability in Cisco WebEx browser extensions for Google Chrome and Mozilla Firefox could allow an unauthenticated,

CVE-2013-6710 MEDIUM
6.8 Dec 14

Cross-site request forgery (CSRF) vulnerability in Cisco WebEx Training Center allows remote attackers to hijack the aut
CVE-2013-1109 MEDIUM
6.8 Jan 17

Cross-site request forgery (CSRF) vulnerability in testingLibraryAction.do in the Training Center testing library in Cis
CVE-2013-6966 MEDIUM
5.8 Dec 17

Open redirect vulnerability in Cisco WebEx Training Center allows remote attackers to redirect users to arbitrary web si
CVE-2013-6971 MEDIUM
5.8 Dec 14

Open redirect vulnerability in Cisco WebEx Training Center allows remote attackers to redirect users to arbitrary web si
CVE-2019-15987 MEDIUM
5.3 Nov 26

A vulnerability in web interface of the Cisco Webex Event Center, Cisco Webex Meeting Center, Cisco Webex Support Center
CVE-2013-6972 MEDIUM
5.0 Dec 14

Cisco WebEx Training Center allows remote attackers to discover session numbers, and bypass host approval for audio-conf
CVE-2013-6968 MEDIUM
5.0 Dec 14

Cisco WebEx Training Center provides different error messages for registration attempts depending on whether the e-mail

CVE-2013-6965 MEDIUM
5.0 Dec 14

The registration component in Cisco WebEx Training Center provides the training-session URL before e-mail confirmation i
CVE-2014-2199 MEDIUM
5.0 May 20

meetinginfo.do in Cisco WebEx Event Center, WebEx Meeting Center, WebEx Sales Center, WebEx Training Center, WebEx Meeti
CVE-2013-6709 MEDIUM
5.0 Dec 14

The registration component in Cisco WebEx Training Center provides the training-session URL before payment is completed,
CVE-2013-6973 MEDIUM
4.3 Dec 14

Cisco WebEx Training Center allows remote attackers to discover registration IDs via a crafted URL, aka Bug ID CSCul5712

Same weakness CWE-264 – Permissions, Privileges, and Access Controls

View all
CVE-2013-0422 CRITICAL POC
9.8
CVE-2016-10372 CRITICAL POC
9.8
CVE-2014-9583 CRITICAL POC
10.0
CVE-2012-0297 CRITICAL POC
10.0
CVE-2015-7709 CRITICAL POC
10.0
CVE-2014-0514 CRITICAL POC
9.3
CVE-2013-6955 CRITICAL POC
10.0
CVE-2012-0299 CRITICAL POC
10.0

Same technique Privilege Escalation

View all
CVE-2025-47812 CRITICAL POC
10.0
CVE-2013-0422 CRITICAL POC
9.8
CVE-2013-0632 CRITICAL POC
9.8
CVE-2017-5689 CRITICAL POC
9.8
CVE-2017-12635 CRITICAL POC
9.8
CVE-2016-10372 CRITICAL POC
9.8
CVE-2014-9583 CRITICAL POC
10.0
CVE-2012-0297 CRITICAL POC
10.0

Share

CVE-2013-1110 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy