4
CVSSv2

CVE-2017-6691

Published: 13/06/2017 Updated: 20/06/2017
CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8
CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8
VMScore: 356
Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N

Vulnerability Summary

A vulnerability in the ConfD CLI of Cisco Elastic Services Controllers could allow an authenticated, remote malicious user to access sensitive information on an affected system. More Information: CSCvd29403. Known Affected Releases: 2.3(2).

Vulnerable Product Search on Vulmon Subscribe to Product

cisco elastic services controller 2.3\\(2\\)

Vendor Advisories

A vulnerability in the ConfD CLI of Cisco Elastic Services Controllers could allow an authenticated, remote attacker to access sensitive information on an affected system The vulnerability is due to improper permissions that are set for certain files by the affected service An attacker could exploit this vulnerability to gain access to sensitive ...