Realpresence Resource Manager Security Vulnerabilities and Issues — Realpresence Resource Manager CVE List

Lucene search

PolycomRealpresence Resource Manager

5 matches found

CVE•added 2017/09/19 7:29 p.m.•43 views

CVE-2015-4681

Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows local users to have unspecified impact via vectors related to weak passwords.

7.8CVSS8.4AI score0.00515EPSS

CVE•added 2017/09/19 7:29 p.m.•43 views

CVE-2015-4683

Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows attackers to obtain sensitive information and potentially gain privileges by leveraging use of session identifiers as parameters with HTTP GET requests.

9.8CVSS9.2AI score0.34308EPSS

CVE•added 2017/09/19 7:29 p.m.•40 views

CVE-2015-4682

Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows remote authenticated users to obtain the installation path via an HTTP POST request to PlcmRmWeb/JConfigManager.

6.5CVSS7.4AI score0.13471EPSS

CVE•added 2017/09/19 7:29 p.m.•38 views

CVE-2015-4684

Multiple directory traversal vulnerabilities in Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allow (1) remote authenticated users to read arbitrary files via a .. (dot dot) in the Modifier parameter to PlcmRmWeb/FileDownload; or remote authenticated administrators to upload arbitrary...

6.5CVSS7.7AI score0.12419EPSS

CVE•added 2017/09/19 7:29 p.m.•36 views

CVE-2015-4685

Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows local users with access to the plcm account to gain privileges via a script in /var/polycom/cma/upgrade/scripts, related to a sudo misconfiguration.

7CVSS7.9AI score0.00186EPSS