CVE-2015-4314

Cisco TelePresence VCS Expressway X8.5.1 - Authenticated Sensitive Info Exposure via Snapshot

Title source: llm

Description

The System Snapshot feature in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.1 allows remote authenticated users to obtain sensitive password-hash information by reading the snapshot file, aka Bug ID CSCuv40422.

References (2)

Core 2

Core References

Vendor Advisory vendor-advisory x_refsource_cisco

http://tools.cisco.com/security/center/viewAlert.x?alertId=40439

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1033266

Scores

EPSS 0.0133

EPSS Percentile 67.6%

Details

CWE

CWE-200

Status published

Products (1)

cisco/telepresence_video_communication_server_software x8.5.1

Published Aug 20, 2015

Tracked Since Feb 18, 2026