CVE-2013-1205

{"id": "CVE-2013-1205", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2013-06-06T13:02:13.007", "references": [{"url": "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1205", "tags": ["Vendor Advisory"], "source": "ykramarz@cisco.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-287"}]}], "descriptions": [{"lang": "en", "value": "The Event Center module in Cisco WebEx Meetings Server does not perform request authentication in all intended circumstances, which allows remote attackers to discover host keys and event passwords via crafted URLs, aka Bug ID CSCue62485."}, {"lang": "es", "value": "El Event Center module en Cisco WebEx Meetings Server no realiza una solicitud de autenticaci\u00f3n en todos los casos previstos, lo que permitir\u00eda a atacantes remotos descubrir las claves de host y las contrase\u00f1as de eventos a trav\u00e9s de direcciones URL especialmente dise\u00f1adas, conocido como Bug ID CSCue62485."}], "lastModified": "2013-06-06T14:34:00.280", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cisco:webex_meetings_server:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9FE5F3F6-C7AE-4384-B58D-F0506719E35C"}], "operator": "OR"}]}], "sourceIdentifier": "ykramarz@cisco.com"}