{"id":"CVE-2013-1205","aliases":["EUVD-2013-1245","GHSA-m95r-m8c3-jhg5"],"status":"published","title":"The Event Center module in Cisco WebEx Meetings Server does not perform request authentication in...","description":"The Event Center module in Cisco WebEx Meetings Server does not perform request authentication in all intended circumstances, which allows remote attackers to discover host keys and event passwords via crafted URLs, aka Bug ID CSCue62485.","severity":{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.018,"percentile":0.78632,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-287"],"published":"2013-06-06T10:00:00Z","modified":"2026-06-16T23:51:01Z","products":[{"vendor":"cisco","product":"webex_meetings_server"}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1205","tags":["vendor-advisory","x_refsource_CISCO","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-1205"},{"url":"https://github.com/advisories/GHSA-m95r-m8c3-jhg5"}],"sources":{"cve":[{"id":"CVE-2013-1205","description":"The Event Center module in Cisco WebEx Meetings Server does not perform request authentication in all intended circumstances, which allows remote attackers to discover host keys and event passwords via crafted URLs, aka Bug ID CSCue62485.","status":"published","published":"2013-06-06T10:00:00Z","modified":"2024-09-17T02:20:44.376Z","updated_at":"2026-11-02T14:34:58.534075Z"}],"euvd":[{"id":"EUVD-2013-1245","description":"The Event Center module in Cisco WebEx Meetings Server does not perform request authentication in all intended circumstances, which allows remote attackers to discover host keys and event passwords via crafted URLs, aka Bug ID CSCue62485.","status":"published","published":"2013-06-06T10:00:00Z","modified":"2024-09-17T02:20:44Z","updated_at":"2026-11-03T00:28:41.388341Z"}],"ghsa":[{"id":"GHSA-m95r-m8c3-jhg5","title":"The Event Center module in Cisco WebEx Meetings Server does not perform request authentication in...","description":"The Event Center module in Cisco WebEx Meetings Server does not perform request authentication in all intended circumstances, which allows remote attackers to discover host keys and event passwords via crafted URLs, aka Bug ID CSCue62485.","status":"published","published":"2022-05-17T05:08:46Z","modified":"2023-01-28T05:03:14Z","cwes":["CWE-287"],"updated_at":"2026-11-02T14:43:56.116009Z"}],"nvd":[{"id":"CVE-2013-1205","description":"The Event Center module in Cisco WebEx Meetings Server does not perform request authentication in all intended circumstances, which allows remote attackers to discover host keys and event passwords via crafted URLs, aka Bug ID CSCue62485.","status":"published","published":"2013-06-06T13:02:13.007Z","modified":"2026-06-16T23:51:01.22Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:02:29.210317Z"}]}}
