Cisco Elastic Services Controller Arbitrary Command Execution Vulnerability

A vulnerability in certain commands of Cisco Elastic Services Controller could allow an authenticated, remote attacker to elevate privileges to root and run dangerous commands on the server. The vulnerability occurs because a "tomcat" user on the system can run certain shell commands, allowing th...

Cisco Elastic Services Controller Information Disclosure Vulnerability

Cisco Elastic Services Controller is a cloud and systems management solution. Cisco Elastic Services Controllers have a security vulnerability in the web interface implementation that could allow an authenticated, remote attacker to gain access to sensitive information on affected systems...

Cisco Elastic Services Controller Remote Command Execution Vulnerability

Cisco Elastic Services Controller is a cloud and systems management solution. A security vulnerability in the ConfD CLI for Cisco Elastic Services Controllers could allow an authenticated, remote attacker to run arbitrary commands as a Linux tomcat user on an affected system...

Cisco Elastic Services Controller Unauthorized Directory Access Vulnerability

Cisco Elastic Services Controller is a cloud and systems management solution. Cisco Elastic Services Controllers has a security vulnerability in the ConfD server component implementation, where a local attacker could obtain sensitive information about an affected system...

Cisco Elastic Services Controller Security Restriction Bypass Vulnerability

Cisco Elastic Services Controller is a cloud and systems management solution. A security vulnerability in the implementation of Cisco Elastic Services Controllers could allow an authenticated, remote attacker to log in as a Linux admin user on an affected system...

Cisco Elastic Services Controller Default Administrator Credentials Vulnerability

Cisco Elastic Services Controller is a cloud and systems management solution. Cisco Elastic Services Controllers has a security vulnerability in the ConfD CLI implementation that stems from the presence of a default, weak, hard-coded password for the admin user on the affected system. A remote...

Cisco Elastic Services Controller Information Disclosure Vulnerability (CNVD-2017-11575)

Cisco Elastic Services Controller is a cloud and systems management solution. Cisco Elastic Services Controllers have a security vulnerability in the file system implementation, where a local attacker obtains sensitive information about an affected system...

Cisco Elastic Services Controller Arbitrary Command Execution Vulnerability

Cisco Elastic Services Controller is a cloud and systems management solution. A security vulnerability in the esclistener.py script in Cisco Elastic Services Controllers could allow an authenticated, remote attacker to run arbitrary commands as the tomcat user on an affected system...

Cisco Elastic Services Controller Information Disclosure Vulnerability (CNVD-2017-11579)

Cisco Elastic Services Controller is a cloud and systems management solution. Cisco Elastic Services Controllers has a security vulnerability in the ConfD CLI implementation where a remote attacker obtains sensitive information about an affected system...

Cisco Elastic Services Controller Authentication Request Processing Arbitrary Command Execution Vulnerability

A vulnerability in the esclistener.py script of Cisco Elastic Services Controllers could allow an authenticated, remote attacker to execute arbitrary commands as the tomcat user on an affected system. The vulnerability is due to insufficient sanitization of arguments that are passed while...

Cisco Prime Network Services Controller Unauthorized Local Command Execution (cisco-sa-20151217-pnsc)(deprecated)

Nessus has dropped device detection of the now EOL Cisco Prime Network Services Controller. This plugin is being deprecated as a result. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2023/07/05. Deprecated along with dropping SSH library support. include"compat.inc"; if description...

Cisco Prime Network Services Controller任意命令执行漏洞

No description provided by source...

CVE-2015-6426

Cisco Prime Network Services Controller 3.0 allows local users to bypass intended access restrictions and execute arbitrary commands via additional parameters to an unspecified command, aka Bug ID CSCus99427...

Command injection

Cisco Prime Network Services Controller 3.0 allows local users to bypass intended access restrictions and execute arbitrary commands via additional parameters to an unspecified command, aka Bug ID CSCus99427...

CVE-2015-6426

Cisco Prime Network Services Controller 3.0 allows local users to bypass intended access restrictions and execute arbitrary commands via additional parameters to an unspecified command, aka Bug ID CSCus99427...