Polycom RealPresence Resource Manager vulnerabilities

3 known CVE vulnerabilities in Polycom RealPresence Resource Manager, translated and rated.

CVE-2015-4685High
Polycom RealPresence Resource Manager before version 8.4 allows local users with access to the plcm account to gain privileges via a script in /var/polycom/cma/upgrade/scripts, related to a sudo misconfiguration.
CVE-2015-4681High
Polycom RealPresence Resource Manager (RPRM) before 8.4 allows local users to have unspecified impact via vectors related to weak passwords.
CVE-2015-4683Critical
Polycom RealPresence Resource Manager (RPRM) before 8.4 allows attackers to obtain sensitive information and potentially gain privileges by leveraging use of session identifiers as parameters with HTTP GET requests.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS