CVE-2015-4196

Platform Software before 4.4.5 in Cisco Unified Communications Domain Manager (CDM) 8.x has a hardcoded password for a privileged account, which allows remote attackers to obtain root access by leveraging knowledge of this password and entering it in an SSH session, aka Bug ID CSCuq45546.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150701-cucdm	Vendor Advisory
http://www.securitytracker.com/id/1032774	Third Party Advisory VDB Entry
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150701-cucdm	Vendor Advisory
http://www.securitytracker.com/id/1032774	Third Party Advisory VDB Entry

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:cisco:unified_communications_domain_manager:4.4.1:::::::*
	cpe:2.3:a:cisco:unified_communications_domain_manager:4.4.2:::::::*
	cpe:2.3:a:cisco:unified_communications_domain_manager:4.4.3:::::::*
	cpe:2.3:a:cisco:unified_communications_domain_manager:4.4.4:::::::*

History

21 Nov 2024, 02:30

Type	Values Removed	Values Added
References	~~() http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150701-cucdm - Vendor Advisory~~	() http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150701-cucdm - Vendor Advisory
References	~~() http://www.securitytracker.com/id/1032774 - Third Party Advisory, VDB Entry~~	() http://www.securitytracker.com/id/1032774 - Third Party Advisory, VDB Entry

Information

Published : 2015-07-04 10:59

Updated : 2024-11-21 02:30

NVD link : CVE-2015-4196

Mitre link : CVE-2015-4196

CVE.ORG link : CVE-2015-4196

JSON object : View

Products Affected

cisco

unified_communications_domain_manager

CWE

CWE-255

Credentials Management Errors

{"id": "CVE-2015-4196", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2015-07-04T10:59:02.217", "references": [{"url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150701-cucdm", "tags": ["Vendor Advisory"], "source": "ykramarz@cisco.com"}, {"url": "http://www.securitytracker.com/id/1032774", "tags": ["Third Party Advisory", "VDB Entry"], "source": "ykramarz@cisco.com"}, {"url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150701-cucdm", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securitytracker.com/id/1032774", "tags": ["Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-255"}]}], "descriptions": [{"lang": "en", "value": "Platform Software before 4.4.5 in Cisco Unified Communications Domain Manager (CDM) 8.x has a hardcoded password for a privileged account, which allows remote attackers to obtain root access by leveraging knowledge of this password and entering it in an SSH session, aka Bug ID CSCuq45546."}, {"lang": "es", "value": "Platform Software anterior a 4.4.5 en Cisco Unified Communications Domain Manager (CDM) 8.x tiene una contrase\u00f1a embebida para una cuenta privilegiada, lo que permite a atacantes remotos obtener el acceso a root mediante el aprovechamiento de conocimiento de esta contrase\u00f1a y su posterior entrada en una sesi\u00f3n SSH, tambi\u00e9n conocido como Bug ID CSCuq45546."}], "lastModified": "2024-11-21T02:30:36.697", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cisco:unified_communications_domain_manager:4.4.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "359E9FEC-5FFF-4815-9DA7-4C3FEF212167"}, {"criteria": "cpe:2.3:a:cisco:unified_communications_domain_manager:4.4.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3BFE5D9C-80A4-4532-BDD8-3F565490F70E"}, {"criteria": "cpe:2.3:a:cisco:unified_communications_domain_manager:4.4.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "88F24B60-A02E-4FDB-B585-B011A7117796"}, {"criteria": "cpe:2.3:a:cisco:unified_communications_domain_manager:4.4.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E0DF5484-6BAB-44BC-A4D6-08077022186D"}], "operator": "OR"}]}], "sourceIdentifier": "ykramarz@cisco.com"}