CVE-2015-4304

The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to bypass intended access restrictions, and create administrative accounts or read data from arbitrary tenant domains, via a crafted URL, aka Bug IDs CSCus62671 and CSCus62652...

CVE-2015-4304

CVE-2015-4304 — Cisco Prime Collaboration Assurance : The web framework (Cisco Prime Collaboration Assurance) before 10.5.1.53684-1 contains an authorization/access control flaw in its web framework that allows an authenticated remote attacker to bypass restrictions via a crafted URL. This can en...

CVE-2015-4306

Cisco Prime Collaboration Assurance web framework before 10.5.1.53684-1 is vulnerable to a session-ID-based escalation where remote authenticated users can bypass login restrictions and impersonate administrators for arbitrary tenant domains via crafted URLs (CVE-2015-4306; related CVEs 4304/4305...

Cisco Prime Collaboration Assurance Information Disclosure Vulnerability

Cisco Prime Collaboration Assurance is an enterprise collaboration network management solution. The solution supports simplified management of unified communications and video collaboration networks through a unified management console, as well as rapid deployment of communications sites. Cisco...

CVE-2015-4304: Undefined Security Weakness

The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to bypass intended access restrictions, and create administrative accounts or read data from arbitrary tenant domains, via a crafted URL, aka Bug IDs CSCus62671 and CSCus62652...

CVE-2015-4307: Undefined Security Weakness

The web framework in Cisco Prime Collaboration Provisioning before 11.0 allows remote authenticated users to bypass intended access restrictions and create administrative accounts via a crafted URL, aka Bug ID CSCut64111...

CVE-2015-4306: Undefined Security Weakness

The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to bypass intended login-session read restrictions, and impersonate administrators of arbitrary tenant domains, by discovering a session identifier and constructing a crafted URL, aka...

PT-2015-6513

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Assurance versions prior to 10.5.1.53684-1 Description The issue allows remote authenticated users to bypass intended system-database read restrictions. This can lead to the discovery of credentials or SNMP communitie...

PT-2015-6515

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Provisioning versions prior to 11.0 Description The issue allows remote authenticated users to bypass intended access restrictions and create administrative accounts via a crafted URL. Recommendations For versions pri...

PT-2015-6512

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Assurance versions prior to 10.5.1.53684-1 Description The issue allows remote authenticated users to bypass intended access restrictions. This can lead to the creation of administrative accounts or the ability to rea...

Cisco Prime Collaboration Assurance Information Disclosure Vulnerability (CNVD-2015-06129)

Cisco Prime Collaboration Assurance is an enterprise collaboration network management solution. The solution supports simplified management of unified communications and video collaboration networks through a unified management console, as well as rapid deployment of communications sites. Cisco...

PT-2015-6514

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Assurance versions prior to 10.5.1.53684-1 Description The issue allows remote authenticated users to bypass intended login-session read restrictions and impersonate administrators of arbitrary tenant domains by...

CVE-2015-4305: Undefined Security Weakness

The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to bypass intended system-database read restrictions, and discover credentials or SNMP communities for arbitrary tenant domains, via a crafted URL, aka Bug ID CSCus62656...

Cisco Releases Security Updates

Cisco has released updates to address vulnerabilities in Prime Collaboration Assurance, Prime Collaboration Provisioning, and TelePresence Server software. Exploitation of these vulnerabilities could allow a remote attacker to escalate privileges, obtain sensitive information, or cause a...

Cisco Prime Collaboration Assurance Information Disclosure Vulnerability

A vulnerability in the web framework of Cisco Prime Collaboration Assurance could allow an authenticated, remote attacker to access information about any device imported into the system database. The vulnerability is due to improper implementation of authorization and access controls. An attacker...

Multiple Vulnerabilities in Cisco Prime Collaboration Assurance

Cisco Prime Collaboration Assurance Software contains the following vulnerabilities: Cisco Prime Collaboration Assurance Web Framework Access Controls Bypass Vulnerability Cisco Prime Collaboration Assurance Information Disclosure Vulnerability Cisco Prime Collaboration Assurance Session ID...

Cisco Prime Collaboration Provisioning Web Framework Access Controls Bypass Vulnerability

A vulnerability in the web framework of Cisco Prime Collaboration Provisioning could allow an authenticated, remote attacker to access higher-privileged functions. An exploit could allow the attacker to access functions, some of which should be accessible only to users who have administrative...

Polycom RealPresence CloudAXIS Suite Cross-Site Scripting Vulnerability

Polycom RealPresence CloudAXIS Suite is a cloud-based, cross-platform video collaboration solution from Polycom. The solution allows meeting schedules to be sent to contacts via email and calendar invitations. A cross-site scripting vulnerability exists in Polycom RealPresence CloudAXIS Suite 1.6...

Facebook ThreatExchange Information Sharing

As Facebook’s ThreatExchange information-sharing platform hits its six-month milestone, the social network today announced that its closing in on 100 participants and has streamlined the application process. ThreatExchange was launched in February as a free vehicle for sharing threat and attack...

The vulnerability of the Cisco Unified Communications Manager system allows a perpetrator to gain root user privileges.

The vulnerability of the Prime Collaboration Deployment component of the Cisco Unified Communications Manager system is related to the lack of protection for service data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain root user privileges through a direc...