The Meeting Center component in Cisco WebEx 11 generates different error messages for invalid file-access attempts depending on whether a file exists, which allows remote authenticated users to enumerate files via a series of SPI calls, aka Bug ID CSCuc35965.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: cisco
Published: 2013-07-31T01:00:00
Updated: 2024-08-06T16:07:38.030Z
Reserved: 2013-05-06T00:00:00
Link: CVE-2013-3425
Vulnrichment
No data.
NVD
Status : Modified
Published: 2013-07-31T13:20:18.877
Modified: 2017-08-29T01:33:23.183
Link: CVE-2013-3425
Redhat
No data.