CVE-2015-4315: Input Validation
The Call Policy Configuration page in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.3 improperly validates external DTDs, which allows remote authenticated users to read arbitrary files or cause a denial of service via a crafted XML document, aka Bug ID CSCuv31853.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-4315?
CVE-2015-4315 has a medium severity rating due to its potential impact on confidentiality and availability.
How do I fix CVE-2015-4315?
To fix CVE-2015-4315, upgrade to an unaffected version of Cisco TelePresence Video Communication Server as recommended by Cisco.
Who is affected by CVE-2015-4315?
CVE-2015-4315 affects users of Cisco TelePresence Video Communication Server, specifically those using version X8.5.3.
What can happen if CVE-2015-4315 is exploited?
Exploiting CVE-2015-4315 can allow remote authenticated users to read arbitrary files or cause a denial of service.
Is authentication required to exploit CVE-2015-4315?
Yes, CVE-2015-4315 requires remote authenticated access to exploit its vulnerabilities.