VULNERABILITY INTELLIGENCE

CVE-2015-6417

CVSS score6.5 MEDIUM
EPSS probability0.95%
CISA KEVNot currently listed
Published2015-12-12
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:S/C:P/I:P/A:P

Description

Cisco Videoscape Distribution Suite Service Manager (VDS-SM) 3.4.0 and earlier does not always use RBAC for backend database access, which allows remote authenticated users to read or write to database entries via (1) the GUI or (2) a crafted HTTP request, aka Bug ID CSCuv87025.

Primary references