CVE-2013-6972: Infoleak
Cisco WebEx Training Center allows remote attackers to discover session numbers, and bypass host approval for audio-conference attendance, by reading HTML source code, aka Bug ID CSCul57126.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-6972?
CVE-2013-6972 has been classified with a moderate severity rating due to its potential to allow unauthorized access.
How do I fix CVE-2013-6972?
To mitigate CVE-2013-6972, ensure that you are using the latest version of Cisco WebEx Training Center with all security patches applied.
What type of vulnerability is CVE-2013-6972?
CVE-2013-6972 is an information disclosure vulnerability that allows attackers to extract session numbers.
Who is affected by CVE-2013-6972?
CVE-2013-6972 affects users of Cisco WebEx Training Center that are not keeping their software updated.
What potential impact does CVE-2013-6972 have?
The potential impact of CVE-2013-6972 includes unauthorized attendance in audio conferences without host approval.