CVE-2015-4683

CRITICAL 9.8EPSS 6.9%

Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows attackers to obtain sensitive information and potentially gain privileges by leveraging use of session identifiers as parameters with HTTP GET requests.

CVSS v3.0: 9.8 CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0: 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS: 6.87% chance of exploitation in the next 30 days, 94th percentile
Published: 2017-09-19
Updated: 2024-08-06

Proof-of-concept exploits (2)

ExploitDB entries (1)

https://www.exploit-db.com/exploits/37449

References

Related