« Volver al listado

CVE-2013-1168

Estado: ModificadaAlta (7.6)—

The web server in Cisco Unified MeetingPlace Application Server 7.x before 7.1MR1 Patch 2, 8.0 before 8.0MR1 Patch 1, and 8.5 before 8.5MR3 Patch 1 does not invalidate a session upon a logout action, which makes it easier for remote attackers to hijack sessions by leveraging knowledge of a session cookie, aka Bug ID CSCuc64885.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Cisco — Unified Meetingplace

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-1168",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.6,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "HIGH",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 4.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@cisco.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2013-04-11T10:55:01.993",
  "references": [
    {
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130410-mp",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130410-mp",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The web server in Cisco Unified MeetingPlace Application Server 7.x before 7.1MR1 Patch 2, 8.0 before 8.0MR1 Patch 1, and 8.5 before 8.5MR3 Patch 1 does not invalidate a session upon a logout action, which makes it easier for remote attackers to hijack sessions by leveraging knowledge of a session cookie, aka Bug ID CSCuc64885."
    },
    {
      "lang": "es",
      "value": "El servidor web de Cisco Unified MeetingPlace Application Server v7.x antes de v7.1MR1 revisión 2, v8.0 antes de v8.0MR1 revisión 1, y v8.5 antes de v8.5MR3 revisión 1 no invalida una sesión en una acción de cierre de sesión, lo que hace que sea más fácil para los atacantes remotos secuestrar sesiones, aprovechando el conocimiento de una cookie de sesión, también conocido como Bug ID CSCuc64885."
    }
  ],
  "lastModified": "2026-06-16T23:50:57.480",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:unified_meetingplace:7.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F1B3B645-4500-4B63-8D1A-1139537DA522"
            },
            {
              "criteria": "cpe:2.3:a:cisco:unified_meetingplace:7.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5CB60381-CF25-41F1-B54B-CA0F1D77CEC5"
            },
            {
              "criteria": "cpe:2.3:a:cisco:unified_meetingplace:7.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0B746BD5-7783-4510-9260-88E6865277A0"
            },
            {
              "criteria": "cpe:2.3:a:cisco:unified_meetingplace:7.0.2:mr1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3D94A24A-E9DE-46A4-AEAF-30DC05FEB685"
            },
            {
              "criteria": "cpe:2.3:a:cisco:unified_meetingplace:7.0.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7EBB601D-887C-40DC-97D0-448D9193F2FF"
            },
            {
              "criteria": "cpe:2.3:a:cisco:unified_meetingplace:7.0.3:mr2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "25556F86-581D-412C-B41B-36B30E12F41A"
            },
            {
              "criteria": "cpe:2.3:a:cisco:unified_meetingplace:7.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CB025761-696C-41B4-9A7C-67CF7A6DBECB"
            },
            {
              "criteria": "cpe:2.3:a:cisco:unified_meetingplace:7.1:mr1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E86A7C56-CFB8-4279-85A2-090CF6B1E1B8"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:unified_meetingplace:8.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5E33B950-9CA4-4438-A7F1-1630CC26E81A"
            },
            {
              "criteria": "cpe:2.3:a:cisco:unified_meetingplace:8.0:mr1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8A8703D6-20FB-40EC-B516-FAF77ED21D29"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:unified_meetingplace:8.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5FF3D6AE-38E4-40C7-AD5D-C7DA67AB9DCC"
            },
            {
              "criteria": "cpe:2.3:a:cisco:unified_meetingplace:8.5.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3A049567-12BC-4A08-B776-C038248E655F"
            },
            {
              "criteria": "cpe:2.3:a:cisco:unified_meetingplace:8.5.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E02FBDCD-FED2-4B6B-B5AC-EB9915ED31E8"
            },
            {
              "criteria": "cpe:2.3:a:cisco:unified_meetingplace:8.5.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BD2F2149-16AE-425E-BAFB-DC5987CBB406"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@cisco.com"
}