PT-2018-8613 · Cisco+1 · Cisco Elastic Services Controller+1

Publicado 2018-01-18 · Atualizado 2020-09-04 · CVE-2018-0106

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Cisco Elastic Services Controller (ESC) (affected versions not specified)

Description: A vulnerability in the ConfD server could allow an unauthenticated, local attacker to access sensitive information on a targeted system due to insufficient security restrictions. An attacker could exploit this by accessing unauthorized information within the ConfD directory and file structure, potentially allowing them to view sensitive information.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Files Accessible to External Parties

Enumeração de Fraquezas

CWE-200

CWE-552

Identificadores relacionados

CVE-2018-0106

Produtos afetados

Cisco Elastic Services Controller

Confd

Referências · 3

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180117-esc · Aviso do Fabricante
• http://securityfocus.com/bid/102757 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-0106 · Nota de Segurança