CVEvulnerability

CVE-2017-6777

4.9 MEDIUM Published 2017-08-17 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-08-17
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
4.9 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
Weaknesses
CWE-200

Description

A vulnerability in the ConfD server of the Cisco Elastic Services Controller (ESC) could allow an authenticated, remote attacker to acquire sensitive system information. The vulnerability is due to insufficient protection of sensitive files on the system. An attacker could exploit this vulnerability by logging into the ConfD server and executing certain commands. An exploit could allow an unprivileged user to view configuration parameters that can be maliciously used. Cisco Bug IDs: CSCvd76409. Known Affected Releases: 2.3, 2.3(2).

Affected configurations

• cisco elastic services controller 2.3 • cisco elastic services controller 2.3\(2\)

Related

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References