CVE-2015-6261

Cisco TelePresence Video Communication Server Expressway X8.5.2 contains CVE-2015-6261: remote authenticated users with the Mobile and Remote Access (MRA) role can bypass access controls and read configuration files by initiating a TFTP session. Root cause is lack of TFTP authentication/controls ...