CVE-2015-6404

Published Dec 15, 2015

Last updated 8 years ago

Overview

Description: Cisco Hosted Collaboration Mediation Fulfillment 10.6(3) does not use RBAC, which allows remote authenticated users to obtain sensitive credential information by leveraging admin access and making SOAP API requests, aka Bug ID CSCuw84374.
Source: ykramarz@cisco.com
NVD status: Modified

Risk scores

CVSS 2.0

Type: Primary
Base score: 4
Impact score: 2.9
Exploitability score: 8
Vector string: AV:N/AC:L/Au:S/C:P/I:N/A:N

Weaknesses

nvd@nist.gov: CWE-200

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:cisco:hosted_collaboration_solution:10.6\\(3\\)_base:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D67E0764-0E79-49CF-A71B-EFC16606416B"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References