Unscored CVE-2013-3448 EUVD-2013-3383GHSA-586g-rf95-j86r

Cisco WebEx Meetings Server does not check whether a user account is active, which allows remote authenticated users to bypass intended acc…

Published Aug 1, 2013 · Updated Aug 6, 2024 · Assigned by cisco

Description

Cisco WebEx Meetings Server does not check whether a user account is active, which allows remote authenticated users to bypass intended access restrictions by performing meeting operations after account deactivation, aka Bug ID CSCuh33315.

References

http://tools.cisco.com/security/center/viewAlert.x?alertId=30277
61572 vdb-entry
20130731 Cisco WebEx Meetings Server Inactive User Authentication Bypass Vulnerability vendor-advisory
95880 vdb-entry