Lucene search

K
cve[email protected]CVE-2015-4314
HistoryAug 20, 2015 - 12:59 a.m.

CVE-2015-4314

2015-08-2000:59:00
CWE-200
web.nvd.nist.gov
27
cisco
telepresence
vcs
x8.5.1
snapshot
information disclosure
cve-2015-4314
cscuv40422
nvd

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

5.9 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

32.7%

The System Snapshot feature in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.1 allows remote authenticated users to obtain sensitive password-hash information by reading the snapshot file, aka Bug ID CSCuv40422.

Affected configurations

NVD
Node
ciscotelepresence_video_communication_server_softwareMatchx8.5.1expressway

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

5.9 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

32.7%