CVE-2015-4262 in Cisco Unified MeetingPlace Web Conferencing
Summary
The password-change feature in Cisco Unified MeetingPlace Web Conferencing 8.5 before 8.5(5) MR3 and 8.6 before 8.6(2) does not check the session ID or require entry of the current password, which allows remote attackers to reset arbitrary passwords via a crafted HTTP request, aka Bug ID CSCuu51839.
Reservation
06/04/2015
Disclosure
07/24/2015
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 76805 | Cisco Unified MeetingPlace Web Conferencing Password Change credentials management | 255 | Not defined | Official fix | CVE-2015-4262 |