CVE-2015-4685 — HIGH (7.0) — White Hats Nepal

Q: How severe is CVE-2015-4685?

CVE-2015-4685 has been rated HIGH with a CVSS base score of 7.0/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2015-4685?

Check the references section above for vendor advisories and patch information. Affected products include: Polycom Realpresence Resource Manager.

Vulnerability Description

Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows local users with access to the plcm account to gain privileges via a script in /var/polycom/cma/upgrade/scripts, related to a sudo misconfiguration.

CVSS Score

7.0

HIGH

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Polycom	Realpresence Resource Manager	<= 8.3.2

Related Weaknesses (CWE)

CWE-264

References

http://packetstormsecurity.com/files/132463/Polycom-RealPresence-Resource-ManageThird Party AdvisoryVDB Entry
http://seclists.org/fulldisclosure/2015/Jun/81ExploitMailing ListThird Party Advisory
http://www.securityfocus.com/archive/1/535852/100/0/threaded
http://www.securityfocus.com/bid/75432Third Party AdvisoryVDB Entry
https://support.polycom.com/global/documents/support/documentation/Security_CentVendor Advisory
https://www.exploit-db.com/exploits/37449/ExploitThird Party AdvisoryVDB Entry
http://packetstormsecurity.com/files/132463/Polycom-RealPresence-Resource-ManageThird Party AdvisoryVDB Entry
http://seclists.org/fulldisclosure/2015/Jun/81ExploitMailing ListThird Party Advisory
http://www.securityfocus.com/archive/1/535852/100/0/threaded
http://www.securityfocus.com/bid/75432Third Party AdvisoryVDB Entry
https://support.polycom.com/global/documents/support/documentation/Security_CentVendor Advisory
https://www.exploit-db.com/exploits/37449/ExploitThird Party AdvisoryVDB Entry

FAQ

What is CVE-2015-4685?

CVE-2015-4685 is a vulnerability with a CVSS score of 7.0 (HIGH). Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows local users with access to the plcm account to gain privileges via a script in /var/polycom/cma/upgrade/scripts, related to a sudo mi...

How severe is CVE-2015-4685?

CVE-2015-4685 has been rated HIGH with a CVSS base score of 7.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2015-4685?

Check the references section above for vendor advisories and patch information. Affected products include: Polycom Realpresence Resource Manager.