CVE-2015-4683 Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows attackers to obtain sensitive information and potentially gain privileges by leveraging use of session identifiers as parameters with...
CriticalCVSS 9.8
EPSS 6.9%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows attackers to obtain sensitive information and potentially gain privileges by leveraging use of session identifiers as parameters with HTTP GET requests.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| polycom realpresence resource manager | <= 8.3.2 | No fix listed |
References
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- 20150626 SEC Consult SA-20150626-0 :: Critical vulnerabilities in Polycom RealPresence Resource Manager (RPRM) allow surveillance on conferences exploit mailing-list third-party-advisory vdb-entry
- 20150626 SEC Consult SA-20150626-0 :: Critical vulnerabilities in Polycom RealPresence Resource Manager (RPRM) allow surveillance on conferences mailing-list
- 75432 third-party-advisory vdb-entry
- support.polycom.com vendor-advisory
- 37449 exploit third-party-advisory vdb-entry