CVE-2013-1168 Auth bypass in n/a

High 7.6 Published 11 Apr 2013 Updated 16 Sep 2024

Remote attackers can hijack user sessions by reusing session cookies after logout, leading to account takeover in Cisco Unified MeetingPlace.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2013-1168?

CVE-2013-1168 is a high-severity authentication bypass vulnerability in n/a, published on 11 Apr 2013. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

The web server in Cisco Unified MeetingPlace Application Server 7.x before 7.1MR1 Patch 2, 8.0 before 8.0MR1 Patch 1, and 8.5 before 8.5MR3 Patch 1 does not invalidate a session upon a logout action, which makes it easier for remote attackers to hijack sessions by leveraging knowledge of a session cookie, aka Bug ID CSCuc64885.

Which versions are affected by CVE-2013-1168?

It affects 1 product.

Products include Cisco Unified Meetingplace.

How do I fix CVE-2013-1168?

No fix has been published for CVE-2013-1168 yet. Limit exposure of the affected software until one is available.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2013-1168 being exploited?

There is no known exploitation of CVE-2013-1168 in the wild and no public exploit code.

Sources

Also known as GHSA-fpmf-wc42-7p59.