EUVD-2017-15749

Malware in sbrugna...

EUVD-2017-15748

Malware in sbrugna...

EUVD-2017-15832

Malware in sbrugna...

Cisco Ultra Services Platform Elastic Services Controller Web Interface Information Disclosure Vulnerability

Cisco Ultra Services Platform is an intelligent online service delivery platform from Cisco, Inc. Elastic Services Controller ESC is an open source modular system. An information disclosure vulnerability exists in the ESC web interface in Cisco Ultra Services Platform version 21.0.v0.65839. A...

Information disclosure

A vulnerability in the Elastic Services Controller ESC web interface of the Cisco Ultra Services Platform could allow an authenticated, remote attacker to acquire sensitive information. The vulnerability is due to the transmission of sensitive information as part of a GET request. An attacker cou...

CVE-2017-6778

A vulnerability in the Elastic Services Controller ESC web interface of the Cisco Ultra Services Platform could allow an authenticated, remote attacker to acquire sensitive information. The vulnerability is due to the transmission of sensitive information as part of a GET request. An attacker cou...

CVE-2017-6778

A vulnerability in the Elastic Services Controller ESC web interface of the Cisco Ultra Services Platform could allow an authenticated, remote attacker to acquire sensitive information. The vulnerability is due to the transmission of sensitive information as part of a GET request. An attacker cou...

CVE-2017-6778

A vulnerability in the Elastic Services Controller ESC web interface of the Cisco Ultra Services Platform could allow an authenticated, remote attacker to acquire sensitive information. The vulnerability is due to the transmission of sensitive information as part of a GET request. An attacker cou...

CVE-2017-6778

Cisco Ultra Services Platform's Elastic Services Controller Web Interface (ESC) is affected. An authenticated, remote attacker can disclose sensitive deployment information via a GET request. Affected release: 21.0.v0.65839. Root cause: transmitting sensitive information as part of a GET request....

CVE-2017-6778: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in the Elastic Services Controller ESC web interface of the Cisco Ultra Services Platform could allow an authenticated, remote attacker to acquire sensitive information. The vulnerability is due to the transmission of sensitive information as part of a GET request. An attacker cou...

PT-2017-17314

Name of the Vulnerable Software and Affected Versions Cisco Ultra Services Platform version 21.0.v0.65839 Description A vulnerability in the Elastic Services Controller ESC web interface could allow an authenticated, remote attacker to acquire sensitive information. This is due to the transmissio...

Cisco Ultra Services Platform Deployment Configuration Information Disclosure Vulnerability

A vulnerability in the Elastic Services Controller ESC web interface of the Cisco Ultra Services Platform could allow an authenticated, remote attacker to acquire sensitive information. The vulnerability is due to the transmission of sensitive information as part of a GET request. An attacker cou...

Cisco Ultra Services Platform Information Disclosure Vulnerability

Cisco Ultra Services Platform is an intelligent online service delivery platform from the U.S. company Cisco Cisco. An information disclosure vulnerability exists in the Virtual Network Manager's VNFM logging function in Cisco Ultra Services Platform version 21.0.v0.65839, which stems from the...

CVE-2017-6695

A vulnerability in the ConfD server in Cisco Ultra Services Platform could allow an authenticated, local attacker to view sensitive information. More Information: CSCvd29398. Known Affected Releases: 21.0.v0.65839...

CVE-2017-6694

A vulnerability in the Virtual Network Function Manager's VNFM logging function of Cisco Ultra Services Platform could allow an authenticated, local attacker to view sensitive data cleartext credentials on an affected system. More Information: CSCvd29355. Known Affected Releases: 21.0.v0.65839...

CVE-2017-6695

A vulnerability in the ConfD server in Cisco Ultra Services Platform could allow an authenticated, local attacker to view sensitive information. More Information: CSCvd29398. Known Affected Releases: 21.0.v0.65839...

CVE-2017-6694

A vulnerability in the Virtual Network Function Manager's VNFM logging function of Cisco Ultra Services Platform could allow an authenticated, local attacker to view sensitive data cleartext credentials on an affected system. More Information: CSCvd29355. Known Affected Releases: 21.0.v0.65839...

Design/Logic Flaw

A vulnerability in the ConfD server in Cisco Ultra Services Platform could allow an authenticated, local attacker to view sensitive information. More Information: CSCvd29398. Known Affected Releases: 21.0.v0.65839...

CVE-2017-6694

CVE-2017-6694 affects Cisco Ultra Services Platform's Virtual Network Function Manager (VNFM) logging function. A vulnerability allows an authenticated, local attacker to view sensitive data (cleartext credentials) on an affected system, via the VNFM logging interface. Affected release: 21.0.v0.6...

CVE-2017-6695

CVE-2017-6695 affects Cisco Ultra Services Platform’s ConfD server. An authenticated, local attacker can view sensitive information due to insufficient protection of sensitive files. Affected release: 21.0.v0.65839. CVSS details: CVSSv2 base 2.1 (LOW) with Partial confidentiality impact; CVSSv3 b...