CVE-2015-6404

Cisco Hosted Collaboration Mediation Fulfillment 10.6(3) does not use RBAC, which allows remote authenticated users to obtain sensitive credential information by leveraging admin access and making SOAP API requests, aka Bug ID CSCuw84374.

Severity	MEDIUM
CVSS	4.0
EPSS	0.18% EPSS low
CWE	CWE-200
KEV
Published	10 years ago
Modified	2 weeks ago

Public Affected Products

Product	Advisory	Evidence
Cisco Hosted Collaboration Solution	cisco-sa-20151210-hcm	Cisco CSAF · structured affected