Information disclosure in Cisco Videoscape Distribution Suite Service Manager

CVE-2015-6364

Cisco Content Delivery System Manager Software 3.2 on Videoscape Distribution Suite Service Manager allows remote attackers to obtain sensitive information via crafted URLs in REST API requests, aka Bug ID CSCuv86960.

Vulnerability class: Information Disclosure

EPSS: 0.018 (75.6th percentile) — read the EPSS interpretation.

Affected products

Cisco Videoscape_distribution_suite_service_manager
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)