CVE-2015-6417

CVE-2015-6417 affects Cisco Videoscape Distribution Suite Service Manager (VDS-SM) 3.4.0 and earlier. The root cause is failure to consistently enforce RBAC for the back-end database, enabling an authenticated remote user to read and write database entries via the GUI or a crafted HTTP request. T...