PT-2015-7146 · Cisco · Cisco Telepresence Ix5000

Published 2015-09-05 · Updated 2016-12-29 · CVE-2015-6276

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco TelePresence IX5000 version 8.0.3

Description The issue allows remote attackers to obtain cleartext versions of HTTPS traffic or spoof devices by directly requesting the certificate directory, due to insufficient access control of a private key associated with an X.509 certificate stored under the web root.

Recommendations For Cisco TelePresence IX5000 version 8.0.3, restrict access to the certificate directory to minimize the risk of exploitation. Consider implementing proper access controls for the private key to prevent unauthorized access.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2015-6276

Affected Products

Cisco Telepresence Ix5000

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2015-6276 · Security Note
• http://tools.cisco.com/security/center/viewAlert.x?alertId=40727 · Vendor Advisory
• http://securitytracker.com/id/1033477 · Note