CVE-2015-4295
published 2015-08-01CVE-2015-4295: The Prime Collaboration Deployment component in Cisco Unified Communications Manager 10.5(3.10000.9) allows remote authenticated users to discover root…
PriorityP422medium4CVSS 2.0
AVNACLAuSCPINAN
EPSS
1.33%
68.0th percentile
The Prime Collaboration Deployment component in Cisco Unified Communications Manager 10.5(3.10000.9) allows remote authenticated users to discover root credentials via a direct request to an unspecified URL, aka Bug ID CSCuv21819.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | unified_communications_manager | — | — |
CVSS provenance
nvdv2.04.0MEDIUMAV:N/AC:L/Au:S/C:P/I:N/A:N
vendor_cisco4.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco Unified Communications Manager Prime Collaboration Deployment Information Disclosure Vulnerability
vendor_cisco·2015-07-30·CVSS 4.0
CVE-2015-4295 [MEDIUM] CWE-200 Cisco Unified Communications Manager Prime Collaboration Deployment Information Disclosure Vulnerability
Cisco Unified Communications Manager Prime Collaboration Deployment Information Disclosure Vulnerability
A vulnerability in the Prime Collaboration Deployment of Cisco Unified Communications Manager could allow an authenticated, remote attacker to view sensitive data.
The vulnerability is due to insufficient protections of data at rest. An attacker could exploit this vulnerability by browsing to a specific URL. An exploit could allow the attacker to view system root credentials.
Cisco has confirmed the vulnerability; however, software updates are not available.
To exploit this vulnerability, an attacker must authenticate to the targeted device. This access requirement reduces the likelihood of a successful exploit.
A successful exploit could allow the attacker to access root credenti
GHSA
GHSA-6p39-ww4v-4pwc: The Prime Collaboration Deployment component in Cisco Unified Communications Manager 10
ghsa_unreviewed·2022-05-17
CVE-2015-4295 [MEDIUM] CWE-200 GHSA-6p39-ww4v-4pwc: The Prime Collaboration Deployment component in Cisco Unified Communications Manager 10
The Prime Collaboration Deployment component in Cisco Unified Communications Manager 10.5(3.10000.9) allows remote authenticated users to discover root credentials via a direct request to an unspecified URL, aka Bug ID CSCuv21819.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2015-08-01
Published