VULNERABILITY INTELLIGENCE

CVE-2015-4262

CVSS score10 HIGH
EPSS probability2.84%
CISA KEVNot currently listed
Published2015-07-24
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C

Description

The password-change feature in Cisco Unified MeetingPlace Web Conferencing before 8.5(5) MR3 and 8.6 before 8.6(2) does not check the session ID or require entry of the current password, which allows remote attackers to reset arbitrary passwords via a crafted HTTP request, aka Bug ID CSCuu51839.

Primary references