CVE-2015-6404

Cisco Hosted Collaboration Mediation Fulfillment 10.6(3) does not use RBAC, which allows remote authenticated users to obtain sensitive credential information by leveraging admin access and making SOAP API requests, aka Bug ID CSCuw84374.

Score

CVSS 2.0 4.0 Medium

Status

Modified - psirt@cisco.com

Published

2015-12-15

Last modified

2024-08-06

Weaknesses

CWE-200

Affected products

• Hosted Collaboration Solution (Cisco)

References

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151210-hcm
• http://www.securityfocus.com/bid/78874