Description
The Meeting Center component in Cisco WebEx 11 generates different error messages for invalid file-access attempts depending on whether a file exists, which allows remote authenticated users to enumerate files via a series of SPI calls, aka Bug ID CSCuc35965.
References
- 20130730 Cisco WebEx Information Disclosure through Inconsistent Error Messages Vulnerability vendor-advisory
- cisco-webex-cve20133425-info-disc(86150) vdb-entry
- 95876 vdb-entry