CVE-2013-6968

Cisco WebEx Training Center provides different error messages for registration attempts depending on whether the e-mail address exists, which allows remote attackers to enumerate attendees via a series of requests, aka Bug ID CSCul36003.

🔗 References (10)

• psirt@ciscohttp://osvdb.org/100913
• psirt@ciscohttp://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6968
• psirt@ciscohttp://tools.cisco.com/security/center/viewAlert.x?alertId=32147
• psirt@ciscohttp://www.securitytracker.com/id/1029492
• psirt@ciscohttps://exchange.xforce.ibmcloud.com/vulnerabilities/89688
• af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/100913
• af854a3a-2127-422b-91ae-364da2661108http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6968
• af854a3a-2127-422b-91ae-364da2661108http://tools.cisco.com/security/center/viewAlert.x?alertId=32147
• af854a3a-2127-422b-91ae-364da2661108http://www.securitytracker.com/id/1029492
• af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/89688