CVE-2015-4685
HighSummary
Polycom RealPresence Resource Manager before version 8.4 allows local users with access to the plcm account to gain privileges via a script in /var/polycom/cma/upgrade/scripts, related to a sudo misconfiguration.
Risk Assessment
Organizations may be exposed to unauthorized access and privilege escalation, potentially leading to serious security breaches.
Recommendation
It is recommended to upgrade to version 8.4 or later and review the sudo configuration to minimize the risk of unauthorized access.
Other vulnerabilities in Polycom RealPresence Resource Manager
See all- CVE-2015-4681High
Polycom RealPresence Resource Manager (RPRM) before 8.4 allows local users to have unspecified impact via vectors related to weak passwords.
- CVE-2015-4683Critical
Polycom RealPresence Resource Manager (RPRM) before 8.4 allows attackers to obtain sensitive information and potentially gain privileges by leveraging use of session identifiers as parameters with HTTP GET requests.
Original NVD description (English source)
Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows local users with access to the plcm account to gain privileges via a script in /var/polycom/cma/upgrade/scripts, related to a sudo misconfiguration.