Privilege Escalation Vulnerability in Cisco Elastic Services Controller

CVE-2017-6712

Summary

A security flaw in Cisco Elastic Services Controller allows an authenticated remote attacker to gain elevated privileges, potentially compromising the integrity of the server. This vulnerability arises from the ability of a 'tomcat' user to execute specific shell commands, which can overwrite files and escalate to root-level access. Users should update to versions 2.3.1.434 or 2.3.2 to mitigate the risks associated with this vulnerability.

References