CVE-2013-3438

Published: Jul 24, 2013Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The web framework in the server in Cisco Unified MeetingPlace Web Conferencing allows remote attackers to bypass intended access restrictions and read unspecified web pages via crafted parameters, aka Bug ID CSCuh86385.

Affected (1)

Products: Cisco: Unified Meetingplace Web Conferencing

Cisco

1 product

Unified Meetingplace Web Conferencing

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Cisco Unified Meetingplace Web Conferencing	All versions

Related CWEs

CWE-264

References (6)

http://osvdb.org/95583

Source: psirt@cisco.com

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3438

Source: psirt@cisco.com

Vendor Advisory

http://tools.cisco.com/security/center/viewAlert.x?alertId=30186

Source: psirt@cisco.com

Vendor Advisory

http://osvdb.org/95583

Source: af854a3a-2127-422b-91ae-364da2661108

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3438

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://tools.cisco.com/security/center/viewAlert.x?alertId=30186

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.