CVE-2015-6404

2015-12-1502:00:00

cisco

www.cve.org

AI Score

5.9

Confidence

Low

EPSS

0.001

Percentile

32.7%

JSON

Cisco Hosted Collaboration Mediation Fulfillment 10.6(3) does not use RBAC, which allows remote authenticated users to obtain sensitive credential information by leveraging admin access and making SOAP API requests, aka Bug ID CSCuw84374.

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151210-hcm

www.securityfocus.com/bid/78874