CVE-2015-4683

CRITICO 9.8CVE-2015-4683 · Published 19/09/2017 · updated 17/06/2026

Package	Affected versions	Patched versions
realpresence resource manager polycom	`≤ 8.3.2`	No fix yet

Description

Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows attackers to obtain sensitive information and potentially gain privileges by leveraging use of session identifiers as parameters with HTTP GET requests.

References

packetstormsecurity.com/files/132463/Polycom-RealPresence-Resource-Manager-RPRM-Disclosure-Traversal.html · Exploit
seclists.org/fulldisclosure/2015/Jun/81 · Exploit
securityfocus.com/archive/1/535852/100/0/threaded
securityfocus.com/bid/75432 · Third Party Advisory
support.polycom.com/global/documents/support/documentation/Security_Center_Post_for_RPRM_CVEs.pdf · Vendor Advisory
exploit-db.com/exploits/37449 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free