CVE-2017-6712

CVE-2017-6712 affects Cisco Elastic Services Controller (ESC) prior to releases 2.3.1.434 and 2.3.2. The root cause is a misconfiguration allowing a "tomcat" user to execute shell commands, enabling arbitrary file overwrites and privilege escalation to root. Documents consistently describe an aut...