CVE-2015-6413

Description

Cisco TelePresence Video Communication Server (VCS) Expressway X8.6 allows remote authenticated users to bypass intended read-only restrictions and upload Tandberg Linux Package (TLP) files by visiting an administrative page, aka Bug ID CSCuw55651.

References

http://www.securitytracker.com/id/1034378

http://www.securityfocus.com/bid/79088

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151209-tvc

Details

Source: Mitre, NVD

Risk Information

CVSS v2