PT-2015-7237
CVE-2015-6413
·
تاريخ النشر
2015-12-13
·
تاريخ التحديث
2016-12-07
الوصف من
CVSS 2.0
4.0
متوسطةالمقاييسAV:N/AC:L/Au:S/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Cisco TelePresence Video Communication Server (VCS) Expressway version X8.6
Description
The issue allows remote authenticated users to bypass intended read-only restrictions and upload Tandberg Linux Package (TLP) files by visiting an administrative page.
Recommendations
For Cisco TelePresence Video Communication Server (VCS) Expressway version X8.6, consider restricting access to administrative pages until a fix is available. As a temporary workaround, limit the ability to upload TLP files to prevent potential exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾