Client-Side Validation Bypass in Cisco WebEx Social
CVE-2013-1245

Currently unrated

Key Information:

Vendor
Cisco
Status
Webex Social
Vendor
CVE Published:
16 May 2013

Summary

The user-management interface of Cisco WebEx Social has a significant vulnerability due to reliance on client-side validation for crucial user fields, including Screen Name and Email Address. This flaw enables remote authenticated users to create specially crafted requests that bypass intended access controls, potentially compromising sensitive user data and functionality. For further details, see Cisco's security advisory.

References

http://tools.cisco.com/security/center/content/CiscoSecur...
vendor-advisoryx_refsource_CISCO

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.