CVE-2015-6417

2015-12-1211:59:01

CWE-264

[email protected]

web.nvd.nist.gov

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

AI Score

6.2

Confidence

Low

EPSS

0.001

Percentile

48.2%

JSON

Cisco Videoscape Distribution Suite Service Manager (VDS-SM) 3.4.0 and earlier does not always use RBAC for backend database access, which allows remote authenticated users to read or write to database entries via (1) the GUI or (2) a crafted HTTP request, aka Bug ID CSCuv87025.

Affected configurations

Nvd

Node

ciscovideoscape_distribution_suite_service_managerMatch3.0.0

ciscovideoscape_distribution_suite_service_managerMatch3.1.0

ciscovideoscape_distribution_suite_service_managerMatch3.2.0

ciscovideoscape_distribution_suite_service_managerMatch3.3.0

ciscovideoscape_distribution_suite_service_managerMatch3.4.0

VendorProductVersionCPE
ciscovideoscape_distribution_suite_service_manager3.0.0cpe:2.3:a:cisco:videoscape_distribution_suite_service_manager:3.0.0:*:*:*:*:*:*:*
ciscovideoscape_distribution_suite_service_manager3.1.0cpe:2.3:a:cisco:videoscape_distribution_suite_service_manager:3.1.0:*:*:*:*:*:*:*
ciscovideoscape_distribution_suite_service_manager3.2.0cpe:2.3:a:cisco:videoscape_distribution_suite_service_manager:3.2.0:*:*:*:*:*:*:*
ciscovideoscape_distribution_suite_service_manager3.3.0cpe:2.3:a:cisco:videoscape_distribution_suite_service_manager:3.3.0:*:*:*:*:*:*:*
ciscovideoscape_distribution_suite_service_manager3.4.0cpe:2.3:a:cisco:videoscape_distribution_suite_service_manager:3.4.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	videoscape_distribution_suite_service_manager	3.0.0	cpe:2.3:a:cisco:videoscape_distribution_suite_service_manager:3.0.0:::::::*
cisco	videoscape_distribution_suite_service_manager	3.1.0	cpe:2.3:a:cisco:videoscape_distribution_suite_service_manager:3.1.0:::::::*
cisco	videoscape_distribution_suite_service_manager	3.2.0	cpe:2.3:a:cisco:videoscape_distribution_suite_service_manager:3.2.0:::::::*
cisco	videoscape_distribution_suite_service_manager	3.3.0	cpe:2.3:a:cisco:videoscape_distribution_suite_service_manager:3.3.0:::::::*
cisco	videoscape_distribution_suite_service_manager	3.4.0	cpe:2.3:a:cisco:videoscape_distribution_suite_service_manager:3.4.0:::::::*