CVE-2018-0106CWE-200

A vulnerability in the ConfD server of the Cisco Elastic Services Controller (ESC) could allow an unauthenticated, local attacker to access sensitive…

published January 18, 2018

CVSS
—
EPSS
0%
Percentile
21.0
In the wild
Unconfirmed
What it is

A vulnerability in the ConfD server of the Cisco Elastic Services Controller (ESC) could allow an unauthenticated, local attacker to access sensitive information on a targeted system. The vulnerability is due to insufficient security restrictions. An attacker could exploit this vulnerability by accessing unauthorized information within the ConfD directory and file structure. Successful exploitation could allow the attacker to view sensitive information. Cisco Bug IDs: CSCvg00221.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00296 · 21.0th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2018-01-18T06:00Z
EPSS history
Timeline
  • 18 JAN 06:00Z
    A vulnerability in the ConfD server of the Cisco Elastic Services Controller (ESC) could allow an unauthenticated, local attacker to access sensitive…
    cvelistv5