NVD

Id
25792  
Name
CVE-2015-4328  
Description
Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 improperly checks for a user account"s read-only attribute, which allows remote authenticated users to execute arbitrary OS commands via crafted HTTP requests, as demonstrated by read or write operations on the Unified Communications lookup page, aka Bug ID CSCuv12552.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2015-08-19  
Modified Date
2017-01-04  
Seq
2015-4328  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
136078 25792 CVE-2015-4328 20150818 Cisco TelePresence Video Communication Server Expressway Command Execution Vulnerability  View
136079 25792 CVE-2015-4328 76399  View
136080 25792 CVE-2015-4328 1033329  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
9030 JVNDB-2015-004350 Cisco TelePresence Video Communication Server Expressway における任意の OS コマンドを実行される脆弱性 Cisco TelePresence Video Communication Server (VCS) Expressway は、ユーザアカウントの read-only 属性を適切にチェックしないため、任意の OS コマンドを実行される脆弱性が存在します。 CVE-2015-4328 81553 CVE-2015-4328 25792 4 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-004350.html 2015-08-18 2015-08-25 View