Insecure Default Credentials in Cisco Elastic Services Controller

CVE-2017-6689

Summary

An authentication vulnerability exists in the Cisco Elastic Services Controller that allows an authenticated remote attacker to access the system as the admin user. This is due to the use of insecure default administrator credentials, which could lead to unauthorized administrative access. Administrators are encouraged to change default credentials to mitigate this risk. More information is available in the security advisories.

References