« Volver al listado

CVE-2015-4262

Estado: ModificadaAlta (10)—

The password-change feature in Cisco Unified MeetingPlace Web Conferencing before 8.5(5) MR3 and 8.6 before 8.6(2) does not check the session ID or require entry of the current password, which allows remote attackers to reset arbitrary passwords via a crafted HTTP request, aka Bug ID CSCuu51839.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Cisco — Unified Meetingplace WEB Conferencing

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2015-4262",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@cisco.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2015-07-24T14:59:02.227",
  "references": [
    {
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150722-mp",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.securitytracker.com/id/1033024",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150722-mp",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id/1033024",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-255"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The password-change feature in Cisco Unified MeetingPlace Web Conferencing before 8.5(5) MR3 and 8.6 before 8.6(2) does not check the session ID or require entry of the current password, which allows remote attackers to reset arbitrary passwords via a crafted HTTP request, aka Bug ID CSCuu51839."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad en la funcionalidad password-change en Cisco Unified MeetingPlace Web Conferencing en versiones anteriores a la 8.5(5) MR3 y 8.6 anteriores a la 8.6(2), no comprueba el ID de sesión o exige el ingreso de la contraseña actual, lo cual permite a atacantes remotos reiniciar arbitrariamente las contraseñas a través de una petición HTTP manipulada, también conocido como Bug ID CSCuu51839."
    }
  ],
  "lastModified": "2026-06-17T00:27:00.483",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:unified_meetingplace_web_conferencing:6.0.417.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B3D3E512-2A9F-43E0-A363-A9B7D81C2922"
            },
            {
              "criteria": "cpe:2.3:a:cisco:unified_meetingplace_web_conferencing:6.0_base:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "54B1E218-B378-4119-A439-23E74EA008C3"
            },
            {
              "criteria": "cpe:2.3:a:cisco:unified_meetingplace_web_conferencing:7.0\\(1\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2BAD75EE-2B65-4E15-BCCD-02710E8FAECB"
            },
            {
              "criteria": "cpe:2.3:a:cisco:unified_meetingplace_web_conferencing:7.0\\(2\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "13A4496E-D15C-4506-8551-A29C49533573"
            },
            {
              "criteria": "cpe:2.3:a:cisco:unified_meetingplace_web_conferencing:7.0\\(2\\)_sr1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "33682A2F-B5C4-4AEF-915E-DCDAE8A09891"
            },
            {
              "criteria": "cpe:2.3:a:cisco:unified_meetingplace_web_conferencing:7.0\\(3\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D4D15FA7-CFDB-4DAD-854A-DF84B02ADEF9"
            },
            {
              "criteria": "cpe:2.3:a:cisco:unified_meetingplace_web_conferencing:7.1\\(1\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "449923E2-5772-400B-A353-0634774946AD"
            },
            {
              "criteria": "cpe:2.3:a:cisco:unified_meetingplace_web_conferencing:7.1\\(2\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "413A2232-EF73-4A00-96DF-F1BE3A12A532"
            },
            {
              "criteria": "cpe:2.3:a:cisco:unified_meetingplace_web_conferencing:8.0\\(1\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "69F97EA5-2520-4CD7-A4E8-BCBA3725A6F8"
            },
            {
              "criteria": "cpe:2.3:a:cisco:unified_meetingplace_web_conferencing:8.0\\(1\\)_sr1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C7A3E983-29CD-4A3C-B0AF-DE9C904A83EA"
            },
            {
              "criteria": "cpe:2.3:a:cisco:unified_meetingplace_web_conferencing:8.0\\(2\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E32E4F4B-F093-47BE-B57B-0BD373E82BE6"
            },
            {
              "criteria": "cpe:2.3:a:cisco:unified_meetingplace_web_conferencing:8.5\\(1\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2593F2B4-9583-4B58-8DE0-95C51DB21751"
            },
            {
              "criteria": "cpe:2.3:a:cisco:unified_meetingplace_web_conferencing:8.5\\(2\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B2DB0F2C-AE4A-44E2-BCD1-6A6E642A3C4D"
            },
            {
              "criteria": "cpe:2.3:a:cisco:unified_meetingplace_web_conferencing:8.5\\(2\\)_sr1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "19D5C268-DC1A-47A5-89C1-E55AD534158E"
            },
            {
              "criteria": "cpe:2.3:a:cisco:unified_meetingplace_web_conferencing:8.5\\(2\\)_sr2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6F823F50-D4E5-41D5-84A9-3ECB76028293"
            },
            {
              "criteria": "cpe:2.3:a:cisco:unified_meetingplace_web_conferencing:8.5\\(3\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9819C361-160B-46EE-818F-E25FF7DDA0F0"
            },
            {
              "criteria": "cpe:2.3:a:cisco:unified_meetingplace_web_conferencing:8.5\\(4\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "525417A0-E568-43AB-8BE4-6C1F93F6D935"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@cisco.com"
}