Cisco WebEx Training Center CVE-2013-6710 Cross Site Request Forgery Vulnerability
BID:64290
Info
Cisco WebEx Training Center CVE-2013-6710 Cross Site Request Forgery Vulnerability
| Bugtraq ID: | 64290 |
| Class: | Design Error |
| CVE: |
CVE-2013-6710 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 12 2013 12:00AM |
| Updated: | Dec 12 2013 12:00AM |
| Credit: | Cisco |
| Vulnerable: |
Cisco WebEx Training Center 0 |
| Not Vulnerable: | |
Discussion
Cisco WebEx Training Center CVE-2013-6710 Cross Site Request Forgery Vulnerability
Cisco WebEx Training Center is prone to a cross-site request-forgery vulnerability due to insufficient CSRF protections.
Exploiting this issue may allow a remote attacker to perform certain unauthorized actions and gain access to the affected application. Other attacks are also possible.
This issue is being tracked by Cisco Bug ID CSCul25567.
Cisco WebEx Training Center is prone to a cross-site request-forgery vulnerability due to insufficient CSRF protections.
Exploiting this issue may allow a remote attacker to perform certain unauthorized actions and gain access to the affected application. Other attacks are also possible.
This issue is being tracked by Cisco Bug ID CSCul25567.
Exploit / POC
Cisco WebEx Training Center CVE-2013-6710 Cross Site Request Forgery Vulnerability
To exploit this issue, an attacker must entice an unsuspecting victim to open a malicious URI.
To exploit this issue, an attacker must entice an unsuspecting victim to open a malicious URI.
Solution / Fix
Cisco WebEx Training Center CVE-2013-6710 Cross Site Request Forgery Vulnerability
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Cisco WebEx Training Center CVE-2013-6710 Cross Site Request Forgery Vulnerability
References:
References: