EDB-37449webappshardware

Polycom RealPresence Resource Manager < 8.4 - Multiple Vulnerabilities

SEC Consult6/30/2015

Exploit-DB에서 보기 GitLab에서 소스 보기

AI 분석AI 기반

익스플로잇 코드

Exploit code not available in database

GitLab에서 소스 보기

CVE-2015-4685

7.0HIGH

Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows local users with access to the plcm account to gain privileges via a script in /var/polycom/cma/upgrade/scripts, related to a sudo mi

Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows local users with access to the plcm account to gain privileges via a script in /var/polycom/cma/upgrade/scripts, related to a sudo mi...

9/19/2017CWE-264

CVE-2015-4684

6.5MEDIUM

Multiple directory traversal vulnerabilities in Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allow (1) remote authenticated users to read arbitrary files via a .. (dot dot) in the Modif

Multiple directory traversal vulnerabilities in Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allow (1) remote authenticated users to read arbitrary files via a .. (dot dot) in the Modif...

9/19/2017CWE-255

CVE-2015-4683

9.8CRITICAL

Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows attackers to obtain sensitive information and potentially gain privileges by leveraging use of session identifiers as parameters with

Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows attackers to obtain sensitive information and potentially gain privileges by leveraging use of session identifiers as parameters with...

9/19/2017CWE-264

CVE-2015-4682

6.5MEDIUM

Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows remote authenticated users to obtain the installation path via an HTTP POST request to PlcmRmWeb/JConfigManager.

9/19/2017CWE-200

CVE-2015-4681

7.8HIGH

Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows local users to have unspecified impact via vectors related to weak passwords.