CVE-2015-4319

The password-change feature in the administrative web interface in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.1 improperly performs…

published August 20, 2015

CVSS
—
EPSS
2%
Percentile
83.9
In the wild
Unconfirmed
What it is

The password-change feature in the administrative web interface in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.1 improperly performs authorization, which allows remote authenticated users to reset arbitrary active-user passwords via unspecified vectors, aka Bug ID CSCuv12338.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02407 · 83.9th percentile
Published
2015-08-20T10:00Z
EPSS history
Timeline
  • 20 AUG 10:00Z
    The password-change feature in the administrative web interface in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.1 improperly performs…
    cvelistv5