CVE-2015-6413

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Video Communication Server (VCS) Expressway version X8.6

Description The issue allows remote authenticated users to bypass intended read-only restrictions and upload Tandberg Linux Package (TLP) files by visiting an administrative page.

Recommendations For Cisco TelePresence Video Communication Server (VCS) Expressway version X8.6, consider restricting access to administrative pages until a fix is available. As a temporary workaround, limit the ability to upload TLP files to prevent potential exploitation.