CVE-2015-4683

Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows attackers to obtain sensitive information and potentially gain privileges by leveraging use of session identifiers as parameters with HTTP GET requests.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2017-09-19

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Realpresence Resource Manager (Polycom)

References

• http://packetstormsecurity.com/files/132463/Polycom-RealPresence-Resource-Manager-RPRM-Disclosure-Traversal.html
• http://seclists.org/fulldisclosure/2015/Jun/81
• http://www.securityfocus.com/archive/1/535852/100/0/threaded
• http://www.securityfocus.com/bid/75432
• https://support.polycom.com/global/documents/support/documentation/Security_Center_Post_for_RPRM_CVEs.pdf
• https://www.exploit-db.com/exploits/37449/