CVE-2015-4262

The password-change feature in Cisco Unified MeetingPlace Web Conferencing before 8.5(5) MR3 and 8.6 before 8.6(2) does not check the session ID or require entry of the current password, which allows remote attackers to reset arbitrary passwords via a crafted HTTP request, aka Bug ID CSCuu51839.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:cisco:unified_meetingplace_web_conferencing:6.0.417.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_meetingplace_web_conferencing:6.0_base:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_meetingplace_web_conferencing:8.5\(3\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_meetingplace_web_conferencing:7.0\(2\)_sr1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_meetingplace_web_conferencing:7.0\(2\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_meetingplace_web_conferencing:8.5\(1\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_meetingplace_web_conferencing:8.0\(1\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_meetingplace_web_conferencing:8.5\(2\)_sr2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_meetingplace_web_conferencing:8.0\(2\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_meetingplace_web_conferencing:8.0\(1\)_sr1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_meetingplace_web_conferencing:8.5\(4\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_meetingplace_web_conferencing:7.0\(1\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_meetingplace_web_conferencing:7.1\(1\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_meetingplace_web_conferencing:7.1\(2\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_meetingplace_web_conferencing:7.0\(3\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_meetingplace_web_conferencing:8.5\(2\)_sr1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_meetingplace_web_conferencing:8.5\(2\):*:*:*:*:*:*:*

Information

Published : 2015-07-24 07:59

Updated : 2017-09-20 18:29


NVD link : CVE-2015-4262

Mitre link : CVE-2015-4262


JSON object : View

CWE
CWE-255

Credentials Management Errors

Advertisement

dedicated server usa

Products Affected

cisco

  • unified_meetingplace_web_conferencing