CVE-2015-4683
23Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 6.9%
from disclosure to weapon0 days
Published on NVDSep 19
1st PoCJun 30
exploitation probability
6.9%top 7% of all CVEs
observed exploitation
nono source reports it
3 public exploit(s)
Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows attackers to obtain sensitive information and potentially gain privileges by leveraging use of session identifiers as parameters with HTTP GET requests.
Affected products
n/a · n/apublic PoCs found — 3
cve_referencepacketstormsecurity.com/files/132463/Polycom-RealPresence-Resource-Manager-RPRM-Disclosure-Traversal.htmlunverifiedcve_referencewww.exploit-db.com/exploits/37449/unverifiedexploitdbwww.exploit-db.com/exploits/37449unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://packetstormsecurity.com/files/132463/Polycom-RealPresence-Resource-Manager-RPRM-Disclosure-Traversal.htmlhttp://seclists.org/fulldisclosure/2015/Jun/81https://support.polycom.com/global/documents/support/documentation/Security_Center_Post_for_RPRM_CVEs.pdfhttps://www.exploit-db.com/exploits/37449/http://www.securityfocus.com/archive/1/535852/100/0/threadedhttp://www.securityfocus.com/bid/75432