CVE-2015-6417
Cisco Videoscape Distribution Suite Service Manager <= 3.4.0 - Authenticated Database Read/Write via GUI or HTTP Request
Title source: llmDescription
Cisco Videoscape Distribution Suite Service Manager (VDS-SM) 3.4.0 and earlier does not always use RBAC for backend database access, which allows remote authenticated users to read or write to database entries via (1) the GUI or (2) a crafted HTTP request, aka Bug ID CSCuv87025.
References (2)
Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/78871
Vendor Advisory vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151210-vdssm
Scores
EPSS
0.0095
EPSS Percentile
57.6%
Details
CWE
CWE-264
Status
published
Products (5)
cisco/videoscape_distribution_suite_service_manager
3.0.0
cisco/videoscape_distribution_suite_service_manager
3.1.0
cisco/videoscape_distribution_suite_service_manager
3.2.0
cisco/videoscape_distribution_suite_service_manager
3.3.0
cisco/videoscape_distribution_suite_service_manager
3.4.0
Published
Dec 12, 2015
Tracked Since
Feb 18, 2026