Test ID:	1.3.6.1.4.1.25623.1.0.105334
Category:	CISCO
Title:	Cisco TelePresence Video Communication Server Expressway Information Disclosure Vulnerability
Summary:	Cisco TelePresence Video Communication Server Expressway is prone to an information-disclosure vulnerability.
Description:	Summary: Cisco TelePresence Video Communication Server Expressway is prone to an information-disclosure vulnerability. Vulnerability Insight: A vulnerability in the System Snapshot of the Cisco TelePresence Video Communication Server (VCS) Expressway could allow an authenticated, remote attacker to view sensitive data. The vulnerability is due to insufficient protection of data at rest. An attacker could exploit this vulnerability by downloading the snapshot file and viewing the password hashes contained. An exploit could allow the attacker to crack the password hashes and use credentials to launch further attacks. This issue is being tracked by Cisco BugId CSCuv40422. Vulnerability Impact: An attacker can exploit this issue to gain access to sensitive information that may aid in further attacks. Affected Software/OS: Cisco TelePresence Video Communication Server Expressway X8.5.1 Solution: Update to version X8.7 or later. CVSS Score: 4.0 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N
Cross-Ref:	BugTraq ID: 76326 Common Vulnerability Exposure (CVE) ID: CVE-2015-4314 Cisco Security Advisory: 20150812 Cisco TelePresence Video Communication Server Expressway Information Disclosure Vulnerability http://tools.cisco.com/security/center/viewAlert.x?alertId=40439 http://www.securitytracker.com/id/1033266
Copyright	This script is Copyright (C) 2015 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.