CVE-2015-6470

Resource Data Management’s Data Manager prior to version 2.2 is affected by a privilege-escalation vulnerability (CWE-269) that allows a valid authenticated user to change passwords for other users, including administrators, via unspecified vectors. Public records indicate remote access and passw...

CVE-2015-6468

CVE-2015-6468 is a CSRF vulnerability in Resource Data Management’s Web-based Data Manager, affected versions prior to 2.2. The issue enables an attacker to hijack an authenticated user’s session and perform unintended actions on trusted pages via CSRF vectors (details not specified in the provid...