CVE-2013-6968

Published: Dec 14, 2013Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Cisco WebEx Training Center provides different error messages for registration attempts depending on whether the e-mail address exists, which allows remote attackers to enumerate attendees via a series of requests, aka Bug ID CSCul36003.

Affected (1)

Products: Cisco: Webex Training Center

Cisco

1 product

Webex Training Center

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Cisco Webex Training Center	All versions

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (10)

http://osvdb.org/100913

Source: psirt@cisco.com

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6968

Source: psirt@cisco.com

Vendor Advisory

http://tools.cisco.com/security/center/viewAlert.x?alertId=32147

Source: psirt@cisco.com

Vendor Advisory

http://www.securitytracker.com/id/1029492

Source: psirt@cisco.com

Third Party AdvisoryVDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/89688

Source: psirt@cisco.com

http://osvdb.org/100913