Cisco: >> Webex Training Center Security Vulnerabilities
Cisco WebEx Training Center allows remote attackers to discover session numbers, and bypass host approval for audio-conference attendance, by reading HTML source code, aka Bug ID CSCul57126.
CVSS Score
5.0
EPSS Score
0.007
Published
2013-12-14
Cisco WebEx Training Center allows remote attackers to discover registration IDs via a crafted URL, aka Bug ID CSCul57121.
CVSS Score
4.3
EPSS Score
0.009
Published
2013-12-14
The registration component in Cisco WebEx Training Center provides the training-session URL before payment is completed, which allows remote attackers to bypass intended access restrictions and join an audio conference by entering credential fields from this URL, aka Bug ID CSCul57111.
CVSS Score
5.0
EPSS Score
0.003
Published
2013-12-14
Cisco WebEx Training Center allows remote authenticated users to remove hands-on lab-session reservations via a crafted URL, aka Bug ID CSCzu81064.
CVSS Score
4.0
EPSS Score
0.002
Published
2013-01-21
Cisco WebEx Training Center allow remote authenticated users to bypass intended privilege restrictions and (1) enable or (2) disable training-center recordings via a crafted URL, aka Bug ID CSCzu81065.
CVSS Score
4.0
EPSS Score
0.002
Published
2013-01-21
Cross-site request forgery (CSRF) vulnerability in testingLibraryAction.do in the Training Center testing library in Cisco WebEx Training Center allows remote attackers to hijack the authentication of arbitrary users for requests that delete tests, aka Bug ID CSCzu81067.
CVSS Score
6.8
EPSS Score
0.001
Published
2013-01-17
Page 2