CVE-2013-3425

Published: Jul 31, 2013Modified: Apr 29, 2026

4.0

Vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Exploitability: 8.0 / Impact: 2.9

Source: NVD

Description

The Meeting Center component in Cisco WebEx 11 generates different error messages for invalid file-access attempts depending on whether a file exists, which allows remote authenticated users to enumerate files via a series of SPI calls, aka Bug ID CSCuc35965.

Affected (1)

Products: Cisco: Webex

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Cisco Webex	Version 11.0

Related CWEs

References (6)

http://osvdb.org/95876

Source: psirt@cisco.com

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3425

Source: psirt@cisco.com

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/86150

Source: psirt@cisco.com

http://osvdb.org/95876

Source: af854a3a-2127-422b-91ae-364da2661108

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3425

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/86150

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.