CVE-2015-6276 Information

Description

Cisco TelePresence IX5000 8.0.3 stores a private key associated with an X.509 certificate under the web root with insufficient access control which allows remote attackers to obtain cleartext versions of HTTPS traffic or spoof devices via a direct request to the certificate directory aka Bug ID CSCuu63501.

Reference

http://tools.cisco.com/security/center/viewAlert.x?alertId=40727 http://www.securitytracker.com/id/1033477