CVE-2013-3448

MediumCVSS 4.0/10Last modified Jun 16, 2026

Description

Cisco WebEx Meetings Server does not check whether a user account is active, which allows remote authenticated users to bypass intended access restrictions by performing meeting operations after account deactivation, aka Bug ID CSCuh33315.

Metrics

CVSS 2.0 4.0/10AV:N/AC:L/Au:S/C:P/I:N/A:N

Weakness enumeration

CWE-264

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://osvdb.org/95880
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3448Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=30277Vendor Advisory
http://www.securityfocus.com/bid/61572Third Party Advisory, VDB Entry
http://osvdb.org/95880
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3448Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=30277Vendor Advisory
http://www.securityfocus.com/bid/61572Third Party Advisory, VDB Entry

Timeline

Published: Aug 2, 2013
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2013

CVE-2013-34506.8Cross-site request forgery (CSRF) vulnerability in the User WebDialer page in Cisco Unified Communications Manager (Unified CM) allows remot CVE-2013-34516.8Multiple cross-site request forgery (CSRF) vulnerabilities in Cisco Unified Communications Manager (Unified CM) allow remote attackers to hi CVE-2013-34537.8Memory leak in Cisco Unified Communications Manager IM and Presence Service before 8.6(5)SU1 and 9.x before 9.1(2), and Cisco Unified Presen CVE-2013-345410.0Cisco TelePresence System Software 1.10.1 and earlier on 500, 13X0, 1X00, 30X0, and 3X00 devices, and 6.0.3 and earlier on TX 9X00 devices, CVE-2013-34555.0Cisco Finesse allows remote attackers to obtain sensitive information by sniffing the network for HTTP query data, aka Bug ID CSCug16732.CVE-2013-34575.0Absolute path traversal vulnerability in the web interface in Cisco Finesse allows remote attackers to read directory contents via a direct CVE-2013-34587.1Cisco Adaptive Security Appliances (ASA) devices, when SMP is used, do not properly process X.509 certificates, which allows remote attacker CVE-2013-34597.8Cisco Unified Communications Manager (Unified CM) 7.1(x) before 7.1(5b)su6a does not properly handle errors, which allows remote attackers t CVE-2013-34607.8Memory leak in Cisco Unified Communications Manager (Unified CM) 8.5(x) before 8.5(1)su6, 8.6(x) before 8.6(2a)su3, and 9.x before 9.1(1) al CVE-2013-34617.1Cisco Unified Communications Manager (Unified CM) 8.5(x) and 8.6(x) before 8.6(2a)su3 and 9.x before 9.1(1) does not properly restrict the r CVE-2013-34628.5Buffer overflow in Cisco Unified Communications Manager (Unified CM) 7.1(x) before 7.1(5b)su6, 8.5(x) before 8.5(1)su6, 8.6(x) before 8.6(2a CVE-2013-34634.3The protocol-inspection feature on Cisco Adaptive Security Appliances (ASA) devices does not properly implement the idle timeout, which allo