CVE-2013-3438

medium

Description

The web framework in the server in Cisco Unified MeetingPlace Web Conferencing allows remote attackers to bypass intended access restrictions and read unspecified web pages via crafted parameters, aka Bug ID CSCuh86385.

References

http://tools.cisco.com/security/center/viewAlert.x?alertId=30186

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3438

http://osvdb.org/95583

Details

Source: Mitre, NVD

Published: 2013-07-24

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 5.3

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N