5.5med
CVE-2017-6693
A vulnerability in the ConfD server component of Cisco Elastic Services Controllers could allow an authenticated, local attacker to access…
Published 9 y ago · modified 4 mo ago · JSON
CVSS
5.5
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.3%
percentile 20%
Public exploits
0
none known
Summary
A vulnerability in the ConfD server component of Cisco Elastic Services Controllers could allow an authenticated, local attacker to access information stored in the file system of an affected system, aka Unauthorized Directory Access. More Information: CSCvd76286. Known Affected Releases: 2.2(9.76) 2.3(1).
Exploit prediction (EPSS)
0.27% probability of exploitation in the next 30 days, higher than 20% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 5.5 | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
| NVD | 2.0 | 2.1 | AV:L/AC:L/Au:N/C:P/I:N/A:N |
Affected products
- n/a Cisco Elastic Services Controller
Classification
- Weakness
- CWE-862 Missing Authorization
References
- tools.cisco.com /security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-esc7 · x_refsource_CONFIRM, x_transferred
- securityfocus.com /bid/98985 · vdb-entry, x_refsource_BID, x_transferred
Sources
- CVE List: CVE-2017-6693
- NVD: CVE-2017-6693
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.