NVD

Id
25733  
Name
CVE-2015-4262  
Description
The password-change feature in Cisco Unified MeetingPlace Web Conferencing before 8.5(5) MR3 and 8.6 before 8.6(2) does not check the session ID or require entry of the current password, which allows remote attackers to reset arbitrary passwords via a crafted HTTP request, aka Bug ID CSCuu51839.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-07-24  
Modified Date
2015-07-30  
Seq
2015-4262  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
135961 25733 CVE-2015-4262 20150722 Cisco Unified MeetingPlace Unauthorized Password Change Vulnerability  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
8606 JVNDB-2015-003926 Cisco Unified MeetingPlace Web Conferencing のパスワード変更機能における任意のパスワードをリセットされる脆弱性 Cisco Unified MeetingPlace Web Conferencing のパスワード変更機能は、セッション ID をチェックしない、または現在のパスワードの入力を要求をしないため、任意のパスワードをリセットされる脆弱性が存在します。 CVE-2015-4262 81487 CVE-2015-4262 25733 10 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-003926.html 2015-07-22 2015-07-27 View