CVE-2017-6772
Summary
| CVE | CVE-2017-6772 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2017-08-17 20:29:00 UTC |
| Updated | 2017-08-22 17:56:00 UTC |
| Description | A vulnerability in Cisco Elastic Services Controller (ESC) could allow an authenticated, remote attacker to view sensitive information. The vulnerability is due to insufficient protection of sensitive data. An attacker could exploit this vulnerability by authenticating to the application and navigating to certain configuration files. An exploit could allow the attacker to view sensitive system configuration files. Cisco Bug IDs: CSCvd29408. Known Affected Releases: 2.3(2). |
Risk And Classification
Problem Types: CWE-200
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Cisco | Elastic Services Controller | 2.3(2) | All | All | All |
| Application | Cisco | Elastic Services Controller | 2.3\(2\) | All | All | All |
| Application | Cisco | Elastic Services Controller | 2.3\(2\) | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Cisco Elastic Services Controller Configuration Files Information Disclosure Vulnerability | CISCO | tools.cisco.com | Vendor Advisory |
| Cisco Elastic Services Controller CVE-2017-6772 Information Disclosure Vulnerability | BID | www.securityfocus.com | Third Party Advisory, VDB Entry |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.