SecuritySpace - CVE-2015-4319

Vulnerability Search		Search 219043 CVE descriptions and 99761 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2015-4319

Description: The password-change feature in the administrative web interface in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.1 improperly performs authorization, which allows remote authenticated users to reset arbitrary active-user passwords via unspecified vectors, aka Bug ID CSCuv12338.

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2015-4319
BugTraq ID: 76366
http://www.securityfocus.com/bid/76366
Cisco Security Advisory: 20150814 Cisco TelePresence Video Communication Server Expressway Access Vulnerability
http://tools.cisco.com/security/center/viewAlert.x?alertId=40442
http://www.securitytracker.com/id/1033323

CVE ID:	CVE-2015-4319
Description:	The password-change feature in the administrative web interface in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.1 improperly performs authorization, which allows remote authenticated users to reset arbitrary active-user passwords via unspecified vectors, aka Bug ID CSCuv12338.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2015-4319 BugTraq ID: 76366 http://www.securityfocus.com/bid/76366 Cisco Security Advisory: 20150814 Cisco TelePresence Video Communication Server Expressway Access Vulnerability http://tools.cisco.com/security/center/viewAlert.x?alertId=40442 http://www.securitytracker.com/id/1033323