25 matches found
EUVD-2015-4704
Malware in sbrugna...
EUVD-2015-4700
Malware in sbrugna...
Code injection
Polycom RealPresence Resource Manager aka RPRM before 8.4 allows attackers to obtain sensitive information and potentially gain privileges by leveraging use of session identifiers as parameters with HTTP GET requests...
Directory traversal
Multiple directory traversal vulnerabilities in Polycom RealPresence Resource Manager aka RPRM before 8.4 allow 1 remote authenticated users to read arbitrary files via a .. dot dot in the Modifier parameter to PlcmRmWeb/FileDownload; or remote authenticated administrators to upload arbitrary fil...
CVE-2015-4682
Polycom RealPresence Resource Manager aka RPRM before 8.4 allows remote authenticated users to obtain the installation path via an HTTP POST request to PlcmRmWeb/JConfigManager...
CVE-2015-4684
Multiple directory traversal vulnerabilities in Polycom RealPresence Resource Manager aka RPRM before 8.4 allow 1 remote authenticated users to read arbitrary files via a .. dot dot in the Modifier parameter to PlcmRmWeb/FileDownload; or remote authenticated administrators to upload arbitrary fil...
CVE-2015-4685
Polycom RealPresence Resource Manager aka RPRM before 8.4 allows local users with access to the plcm account to gain privileges via a script in /var/polycom/cma/upgrade/scripts, related to a sudo misconfiguration...
CVE-2015-4681
Polycom RealPresence Resource Manager (RPRM) <= 8.3.x is vulnerable to CVE-2015-4681 (and related CVEs) via vectors related to weak passwords, enabling local access with complete impact on confidentiality, integrity, and availability. The SEC Consult advisory reports multiple vulnerabilities a...
PT-2017-6787
Name of the Vulnerable Software and Affected Versions Polycom RealPresence Resource Manager versions prior to 8.4 Description The issue allows remote authenticated users to read arbitrary files and remote authenticated administrators to upload arbitrary files. This can be achieved through various...
CVE-2015-4682: Exposure of Sensitive Information to an Unauthorized Actor
Polycom RealPresence Resource Manager aka RPRM before 8.4 allows remote authenticated users to obtain the installation path via an HTTP POST request to PlcmRmWeb/JConfigManager...
CVE-2015-4684: Undefined Security Weakness
Multiple directory traversal vulnerabilities in Polycom RealPresence Resource Manager aka RPRM before 8.4 allow 1 remote authenticated users to read arbitrary files via a .. dot dot in the Modifier parameter to PlcmRmWeb/FileDownload; or remote authenticated administrators to upload arbitrary fil...
PT-2017-6785
Name of the Vulnerable Software and Affected Versions Polycom RealPresence Resource Manager versions prior to 8.4 Description The issue allows remote authenticated users to obtain the installation path via an HTTP POST request to "PlcmRmWeb/JConfigManager". Recommendations For versions prior to...
PT-2017-6784
Name of the Vulnerable Software and Affected Versions Polycom RealPresence Resource Manager versions prior to 8.4 Description The issue allows local users to have an unspecified impact due to weak passwords. Recommendations For versions prior to 8.4, update to version 8.4 or later to resolve the...
PT-2017-6786
Name of the Vulnerable Software and Affected Versions Polycom RealPresence Resource Manager versions prior to 8.4 Description The issue allows attackers to obtain sensitive information and potentially gain privileges. This is achieved by leveraging the use of session identifiers as parameters wit...
CVE-2015-4681: Undefined Security Weakness
Polycom RealPresence Resource Manager aka RPRM before 8.4 allows local users to have unspecified impact via vectors related to weak passwords...
CVE-2015-4683: Undefined Security Weakness
Polycom RealPresence Resource Manager aka RPRM before 8.4 allows attackers to obtain sensitive information and potentially gain privileges by leveraging use of session identifiers as parameters with HTTP GET requests...
PT-2017-6788
Name of the Vulnerable Software and Affected Versions Polycom RealPresence Resource Manager versions prior to 8.4 Description The issue allows local users with access to the plcm account to gain privileges due to a sudo misconfiguration. This is related to a script in...
CVE-2015-4685: Undefined Security Weakness
Polycom RealPresence Resource Manager aka RPRM before 8.4 allows local users with access to the plcm account to gain privileges via a script in /var/polycom/cma/upgrade/scripts, related to a sudo misconfiguration...
Polycom RealPresence Resource Manager Unauthorized Access Vulnerability
RealPresence Resource Manager software is a key component of the Polycom RealPresence platform, a robust device and software optimized for virtual environments. An unauthorized access vulnerability exists in Polycom RealPresence Resource Manager, which could be exploited by an attacker to gain...
