Webex Training Center
CVE-2013-6965
MEDIUM
Severity by source
AV:N/AC:L/Au:N/C:P/I:N/A:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
AV:N/AC:L/Au:N/C:P/I:N/A:N
Lifecycle Timeline
1DescriptionCVE.org
The registration component in Cisco WebEx Training Center provides the training-session URL before e-mail confirmation is completed, which allows remote attackers to bypass intended access restrictions and join an audio conference by entering credential fields from this URL, aka Bug ID CSCul36183.
AnalysisAI
The registration component in Cisco WebEx Training Center provides the training-session URL before e-mail confirmation is completed, which allows remote attackers to bypass intended access. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Technical ContextAI
This vulnerability is classified under CWE-264. The registration component in Cisco WebEx Training Center provides the training-session URL before e-mail confirmation is completed, which allows remote attackers to bypass intended access restrictions and join an audio conference by entering credential fields from this URL, aka Bug ID CSCul36183. Affected products include: Cisco Webex Training Center.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
More in Webex Training Center
View allA vulnerability in Cisco WebEx browser extensions for Google Chrome and Mozilla Firefox could allow an unauthenticated,
Cross-site request forgery (CSRF) vulnerability in Cisco WebEx Training Center allows remote attackers to hijack the aut
Cross-site request forgery (CSRF) vulnerability in testingLibraryAction.do in the Training Center testing library in Cis
Open redirect vulnerability in Cisco WebEx Training Center allows remote attackers to redirect users to arbitrary web si
Open redirect vulnerability in Cisco WebEx Training Center allows remote attackers to redirect users to arbitrary web si
A vulnerability in web interface of the Cisco Webex Event Center, Cisco Webex Meeting Center, Cisco Webex Support Center
Cisco WebEx Training Center allows remote attackers to discover session numbers, and bypass host approval for audio-conf
Cisco WebEx Training Center provides different error messages for registration attempts depending on whether the e-mail
meetinginfo.do in Cisco WebEx Event Center, WebEx Meeting Center, WebEx Sales Center, WebEx Training Center, WebEx Meeti
The registration component in Cisco WebEx Training Center provides the training-session URL before payment is completed,
Cisco WebEx Training Center allows remote attackers to discover registration IDs via a crafted URL, aka Bug ID CSCul5712
Cross-site scripting (XSS) vulnerability in the registration component in Cisco WebEx Training Center allows remote atta
Same technique Privilege Escalation
View allShare
External POC / Exploit Code
Leaving vuln.today