Unscored CVE-2015-6417 EUVD-2015-6359GHSA-52gj-mvxw-vcvp

Cisco Videoscape Distribution Suite Service Manager (VDS-SM) 3.4.0 and earlier does not always use RBAC for backend database access, which …

Published Dec 12, 2015 · Updated Aug 6, 2024 · Assigned by cisco

Description

Cisco Videoscape Distribution Suite Service Manager (VDS-SM) 3.4.0 and earlier does not always use RBAC for backend database access, which allows remote authenticated users to read or write to database entries via (1) the GUI or (2) a crafted HTTP request, aka Bug ID CSCuv87025.

References

78871 vdb-entry
20151210 Cisco Videoscape Distribution Suite Service Manager Unauthorized Access Vulnerability vendor-advisory