CVE-2015-4685
HIGH 7.0EPSS 1.2%
Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows local users with access to the plcm account to gain privileges via a script in /var/polycom/cma/upgrade/scripts, related to a sudo misconfiguration.
- CVSS v3.0 NVD
- 7.0 HIGH
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS v2.0 NVD
- 4.4 MEDIUM
AV:L/AC:M/Au:N/C:P/I:P/A:P - EPSS
- 1.20% chance of exploitation in the next 30 days, 68th percentile
- Published
- 2017-09-19
- Updated
- 2024-08-06
Proof-of-concept exploits (1)
ExploitDB entries (1)
Security advisories
- https://support.polycom.com/global/documents/support/documentation/Security_Center_Post_f…
- http://packetstormsecurity.com/files/132463/Polycom-RealPresence-Resource-Manager-RPRM-Di…
- http://www.securityfocus.com/bid/75432