CVE-2015-8332
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2015-8332
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Huawei Video Content Management (VCM) before V100R001C10SPC001 does not properly "authenticate online user identities and privileges," which allows remote authenticated users to gain privileges and perform a case operation as another user via a crafted message, aka "Horizontal Privilege Escalation Vulnerability."
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Huawei Video Content Management 权限许可和访问控制漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Huawei Video Content Management（VCM）是中国华为（Huawei）公司的一套视频内容管理系统。 Huawei VCM V100R001C10B010版本中存在提取漏洞，该漏洞源于程序对登录用户进行身份和权限验证处理不当。远程攻击者可通过向服务器发送恶意构造的消息利用该漏洞对其他用户创建的案件进行非法操作，影响其他用户的操作和使用。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2015-8332
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2015-8332
请登录查看更多情报信息。
Same Patch Batch · n/a · 2017-08-28 · 73 CVEs total
| CVE-2014-8900 | IBM UrbanCode Release 跨站请求伪造漏洞 | |
| CVE-2015-1876 | ES File Explorer 路径遍历漏洞 | |
| CVE-2015-1443 | fli4l 安全漏洞 | |
| CVE-2014-9558 | Smartwebsites SmartCMS SQL注入漏洞 | |
| CVE-2014-9557 | Smartwebsites SmartCMS 跨站脚本漏洞 | |
| CVE-2014-9514 | BMC Footprints Service Core 跨站脚本漏洞 | |
| CVE-2014-9513 | xbindkeys-config 安全漏洞 | |
| CVE-2014-9483 | Emacs 安全漏洞 | |
| CVE-2014-9469 | vBulletin 跨站脚本漏洞 | |
| CVE-2014-9312 | WordPress Photo Gallery 安全漏洞 | |
| CVE-2015-0101 | IBM Business Process Manager Process Center 跨站脚本漏洞 | |
| CVE-2014-8871 | Hybris Commerce Software Suite 路径遍历漏洞 | |
| CVE-2014-8753 | Cit-e-Net Cit-e-Access 跨站脚本漏洞 | |
| CVE-2014-8428 | Barracuda Load Balancer 权限许可和访问控制漏洞 | |
| CVE-2014-8426 | Barracuda Load Balancer 安全漏洞 | |
| CVE-2014-8168 | Red Hat Satellite 安全漏洞 | |
| CVE-2014-5302 | 多款ZOHO产品路径遍历漏洞 | |
| CVE-2014-5301 | 多款ZOHO产品路径遍历漏洞 | |
| CVE-2014-4925 | Docutek Solutions Good for Enterprise for Android 跨站脚本漏洞 | |
| CVE-2014-0141 | Red Hat Satellite 跨站脚本漏洞 |
Showing top 20 of 73 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2015-8332
No comments yet