CVE-2015-4683

Critical

Published: 19/09/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Polycom RealPresence Resource Manager (RPRM) before 8.4 allows attackers to obtain sensitive information and potentially gain privileges by leveraging use of session identifiers as parameters with HTTP GET requests.

Risk Assessment

Attackers can exploit this vulnerability to gain access to sensitive data, potentially leading to privilege escalation within the system.

Recommendation

It is recommended to update Polycom RealPresence Resource Manager to version 8.4 or later to mitigate this vulnerability.

Original NVD description (English source)

Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows attackers to obtain sensitive information and potentially gain privileges by leveraging use of session identifiers as parameters with HTTP GET requests.