Information Disclosure Vulnerability in Cisco Elastic Services Controller

CVE-2017-6777

What is CVE-2017-6777?

A vulnerability exists in the ConfD server of Cisco's Elastic Services Controller that allows authenticated attackers to obtain sensitive system information. This weakness arises from inadequate security measures around sensitive files within the system. An attacker with access to the ConfD server can execute specific commands to extract confidential configuration data, potentially leading to further exploitation of system vulnerabilities. The issue is documented under Cisco Bug ID CSCvd76409.

References