Unscored CVE-2015-6404 EUVD-2015-6346GHSA-jx4f-2jgh-g5h9

Cisco Hosted Collaboration Mediation Fulfillment 10.6(3) does not use RBAC, which allows remote authenticated users to obtain sensitive cre…

Published Dec 15, 2015 · Updated Aug 6, 2024 · Assigned by cisco

Description

Cisco Hosted Collaboration Mediation Fulfillment 10.6(3) does not use RBAC, which allows remote authenticated users to obtain sensitive credential information by leveraging admin access and making SOAP API requests, aka Bug ID CSCuw84374.

References

78874 vdb-entry
20151210 Cisco Hosted Collaboration Mediation Fulfillment SOAP API Sensitive Information Disclosure Vulnerability vendor-advisory