Information Disclosure Vulnerability in Cisco Elastic Services Controller
CVE-2017-6786

6.3MEDIUM

Key Information:

Vendor
Cisco
Status
Elastic Services Controller
Vendor
CVE Published:
17 August 2017

Summary

A security flaw in Cisco's Elastic Services Controller allows authenticated, local, unprivileged attackers to access sensitive information due to inadequate protection of log files. By gaining access to the system, an attacker can exploit this weakness to read unprotected log files, potentially exposing system credentials and compromising the integrity of the affected systems. For more information on this vulnerability, see Cisco's advisory.

Affected Version(s)

Elastic Services Controller 2.2(9.76).

References

http://www.securityfocus.com/bid/100391
vdb-entryx_refsource_BID
https://tools.cisco.com/security/center/content/CiscoSecu...
vendor-advisoryx_refsource_CISCO

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.