CVE-2015-4683
CriticalSummary
Polycom RealPresence Resource Manager (RPRM) before 8.4 allows attackers to obtain sensitive information and potentially gain privileges by leveraging use of session identifiers as parameters with HTTP GET requests.
Risk Assessment
Attackers can exploit this vulnerability to gain access to sensitive data, potentially leading to privilege escalation within the system.
Recommendation
It is recommended to update Polycom RealPresence Resource Manager to version 8.4 or later to mitigate this vulnerability.
Other vulnerabilities in Polycom RealPresence Resource Manager
See all- CVE-2015-4685High
Polycom RealPresence Resource Manager before version 8.4 allows local users with access to the plcm account to gain privileges via a script in /var/polycom/cma/upgrade/scripts, related to a sudo misconfiguration.
- CVE-2015-4681High
Polycom RealPresence Resource Manager (RPRM) before 8.4 allows local users to have unspecified impact via vectors related to weak passwords.
Original NVD description (English source)
Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows attackers to obtain sensitive information and potentially gain privileges by leveraging use of session identifiers as parameters with HTTP GET requests.