CVE-2015-6276

Cisco TelePresence IX5000 8.0.3 stores a private key associated with an X.509 certificate under the web root with insufficient access control, which allows remote attackers to obtain cleartext versions of HTTPS traffic or spoof devices via a direct request to the certificate directory, aka Bug ID CSCuu63501.

Score

CVSS 2.0 5.0 Medium

Status

Modified - psirt@cisco.com

Published

2015-09-05

Last modified

2024-08-06

Weaknesses

CWE-200

Affected products

• Telepresence System Software Ix (Cisco)

References

• http://tools.cisco.com/security/center/viewAlert.x?alertId=40727
• http://www.securitytracker.com/id/1033477