EUVD-2015-4337

Malware in sbrugna...

Code injection

The System Snapshot feature in Cisco TelePresence Video Communication Server VCS Expressway X8.5.1 allows remote authenticated users to obtain sensitive password-hash information by reading the snapshot file, aka Bug ID CSCuv40422...

CVE-2015-4314

The System Snapshot feature in Cisco TelePresence Video Communication Server VCS Expressway X8.5.1 allows remote authenticated users to obtain sensitive password-hash information by reading the snapshot file, aka Bug ID CSCuv40422...

CVE-2015-4314

Cisco TelePresence Video Communication Server Expressway (X8.5.1) is affected by CVE-2015-4314 in the System Snapshot feature. An authenticated, remote attacker can read the snapshot file and obtain password hashes, enabling information disclosure. The vulnerability requires authenticated access;...