Information Disclosure in Cisco Wide Area Application Services by Remote Attackers

CVE-2017-6730

What is CVE-2017-6730?

A vulnerability exists in the web-based GUI of Cisco Wide Area Application Services (WAAS) Central Manager, allowing unauthenticated remote attackers to access completed reports from the affected system. This issue specifically impacts configurations utilizing the Central Manager function across several versions of Cisco WAAS software. Notably, versions 4.4(7), 6.2(1), and 6.2(3) are susceptible, while fixed releases include 6.3(0.228), 6.3(0.226), 6.2(3d)8, and 5.5(7b)17. It is crucial for administrators using affected versions to apply the necessary updates to mitigate risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References