Lack of RBAC in Cisco Hosted Collaboration Mediation Fulfillment 10.6(3) Allows Unauthorized Access to Sensitive Credentials (CSCuw84374)

Lack of RBAC in Cisco Hosted Collaboration Mediation Fulfillment 10.6(3) Allows Unauthorized Access to Sensitive Credentials (CSCuw84374)

CVE-2015-6404 · MEDIUM Severity

AV:N/AC:L/AU:S/C:P/I:N/A:N

Cisco Hosted Collaboration Mediation Fulfillment 10.6(3) does not use RBAC, which allows remote authenticated users to obtain sensitive credential information by leveraging admin access and making SOAP API requests, aka Bug ID CSCuw84374.

Learn more about our Api Penetration Testing.