CVE-2015-4196: Medium severity cisco unified communications domain manager platform vulnerability
Platform Software before 4.4.5 in Cisco Unified Communications Domain Manager (CDM) 8.x has a hardcoded password for a privileged account, which allows remote attackers to obtain root access by leveraging knowledge of this password and entering it in an SSH session, aka Bug ID CSCuq45546.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-4196?
CVE-2015-4196 is considered to have a high severity due to the presence of a hardcoded password that allows remote attackers to gain root access.
How do I fix CVE-2015-4196?
To fix CVE-2015-4196, upgrade Cisco Unified Communications Domain Manager to version 4.4.5 or later where the hardcoded password issue is resolved.
Who is affected by CVE-2015-4196?
CVE-2015-4196 affects users operating Cisco Unified Communications Domain Manager versions 4.4.1 through 4.4.4.
What can an attacker do by exploiting CVE-2015-4196?
An attacker exploiting CVE-2015-4196 can obtain root access to the affected Cisco Unified Communications Domain Manager through SSH.
When was CVE-2015-4196 disclosed?
CVE-2015-4196 was disclosed on July 1, 2015, in a Cisco security advisory.