CVE-2017-6778

MEDIUM

Cisco Ultra Services Platform 21.0.v0.65839 - Authenticated Exposure of Sensitive Information via GET Request

Title source: llm

Description

A vulnerability in the Elastic Services Controller (ESC) web interface of the Cisco Ultra Services Platform could allow an authenticated, remote attacker to acquire sensitive information. The vulnerability is due to the transmission of sensitive information as part of a GET request. An attacker could exploit this vulnerability by sending a GET request to a vulnerable device. An exploit could allow the attacker to view information regarding the Ultra Services Platform deployment. Cisco Bug IDs: CSCvd76406. Known Affected Releases: 21.0.v0.65839.

References (2)

Core 2

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/100380

Vendor Advisory vendor-advisory x_refsource_cisco

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-usp

Scores

CVSS v3 6.5

EPSS 0.0120

EPSS Percentile 64.5%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Details

CWE

CWE-200

Status published

Products (2)

cisco/ultra_services_platform 21.0.v0.65839

Cisco Systems, Inc./Ultra Services Platform 21.0.v0.65839

Published Aug 17, 2017

Tracked Since Feb 18, 2026