Description
The registration component in Cisco WebEx Training Center provides the training-session URL before e-mail confirmation is completed, which allows remote attackers to bypass intended access restrictions and join an audio conference by entering credential fields from this URL, aka Bug ID CSCul36183.
References
- http://tools.cisco.com/security/center/viewAlert.x?alertId=32157
- 1029492 vdb-entry
- 100911 vdb-entry
- 64281 vdb-entry
- 20131212 Cisco WebEx Training Center Bypass Email Verification to Join Audio Conference Vulnerability vendor-advisory
- cisco-webex-cve20136965-info-disc(89691) vdb-entry