CVE-2013-3425

The Meeting Center component in Cisco WebEx 11 generates different error messages for invalid file-access attempts depending on whether a file exists, which allows remote authenticated users to enumerate files via a series of SPI calls, aka Bug ID CSCuc35965.

Score

CVSS 2.0 4.0 Medium

Status

Modified - psirt@cisco.com

Published

2013-07-31

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Webex (Cisco)

References

• http://osvdb.org/95876
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3425
• https://exchange.xforce.ibmcloud.com/vulnerabilities/86150