CVE-2013-1168

First published: Thu Apr 11 2013(Updated: )

The web server in Cisco Unified MeetingPlace Application Server 7.x before 7.1MR1 Patch 2, 8.0 before 8.0MR1 Patch 1, and 8.5 before 8.5MR3 Patch 1 does not invalidate a session upon a logout action, which makes it easier for remote attackers to hijack sessions by leveraging knowledge of a session cookie, aka Bug ID CSCuc64885.

Credit: ykramarz@cisco.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• agent/author
• agent/description
• agent/event
• agent/first-publish-date
• agent/references
• agent/severity
• agent/softwarecombine
• agent/tags
• agent/type
• collector/nvd-index
• vendor/cisco
• canonical/cisco unified meetingplace
• version/cisco unified meetingplace/7.0
• version/cisco unified meetingplace/7.0.1
• version/cisco unified meetingplace/7.0.2
• version/cisco unified meetingplace/7.0.2-mr1
• version/cisco unified meetingplace/7.0.3
• version/cisco unified meetingplace/7.0.3-mr2
• version/cisco unified meetingplace/7.1
• version/cisco unified meetingplace/7.1-mr1
• version/cisco unified meetingplace/8.0
• version/cisco unified meetingplace/8.0-mr1
• version/cisco unified meetingplace/8.5
• version/cisco unified meetingplace/8.5.1
• version/cisco unified meetingplace/8.5.2
• version/cisco unified meetingplace/8.5.3