CVE-2015-4684

Multiple directory traversal vulnerabilities in Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allow (1) remote authenticated users to read…

published September 19, 2017

CVSS
—
EPSS
5%
Percentile
92.1
In the wild
Unconfirmed
What it is

Multiple directory traversal vulnerabilities in Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allow (1) remote authenticated users to read arbitrary files via a .. (dot dot) in the Modifier parameter to PlcmRmWeb/FileDownload; or remote authenticated administrators to upload arbitrary files via the (2) Filename or (3) SE_FNAME parameter to PlcmRmWeb/FileUpload or to read and remove arbitrary files via the (4) filePathName parameter in an importSipUriReservations SOAP request to PlcmRmWeb/JUserManager.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04926 · 92.1th percentile
Published
2017-09-19T19:00Z
EPSS history
Timeline
  • 19 SEP 19:00Z
    Multiple directory traversal vulnerabilities in Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allow (1) remote authenticated users to read…
    cvelistv5