CVE-2015-6417

2015-12-1211:00:00

cisco

www.cve.org

AI Score

6.2

Confidence

Low

EPSS

0.001

Percentile

48.2%

JSON

Cisco Videoscape Distribution Suite Service Manager (VDS-SM) 3.4.0 and earlier does not always use RBAC for backend database access, which allows remote authenticated users to read or write to database entries via (1) the GUI or (2) a crafted HTTP request, aka Bug ID CSCuv87025.