VULNERABILITY INTELLIGENCE

CVE-2015-6404

CVSS score4 MEDIUM
EPSS probability0.95%
CISA KEVNot currently listed
Published2015-12-15
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:S/C:P/I:N/A:N

Description

Cisco Hosted Collaboration Mediation Fulfillment 10.6(3) does not use RBAC, which allows remote authenticated users to obtain sensitive credential information by leveraging admin access and making SOAP API requests, aka Bug ID CSCuw84374.

Weakness classification

  • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Primary references