PT-2017-17307 · Cisco · Cisco Ultra Services Framework

Publicado 2017-08-17 · Atualizado 2017-08-22 · CVE-2017-6771

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco Ultra Services Framework version 21.0.v0.65839

Description A vulnerability in the AutoVNF automation tool could allow an unauthenticated, remote attacker to acquire sensitive information due to insufficient protection of sensitive data. An attacker could exploit this by browsing to a specific URL of an affected device, potentially allowing them to view sensitive configuration information about the deployment.

Recommendations For version 21.0.v0.65839, consider restricting access to the specific URL that could be exploited to view sensitive configuration information until a fix is available. As a temporary workaround, limit browsing to this URL to prevent potential exploitation.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2017-6771

Produtos afetados

Cisco Ultra Services Framework

Referências · 4

• https://osv.dev/vulnerability/CVE-2017-6771 · Aviso do Fabricante
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-usf · Aviso do Fabricante
• http://securityfocus.com/bid/100385 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-6771 · Nota de Segurança