NVD

Id
88038  
Name
CVE-2017-6711  
Description
A vulnerability in the Ultra Automation Service (UAS) of the Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to gain unauthorized access to a targeted device. The vulnerability is due to an insecure default configuration of the Apache ZooKeeper service used by the affected software. An attacker could exploit this vulnerability by accessing the affected device through the orchestrator network. An exploit could allow the attacker to gain access to ZooKeeper data nodes (znodes) and influence the behavior of the system's high-availability feature. This vulnerability affects all releases of Cisco Ultra Services Framework UAS prior to Releases 5.0.3 and 5.1. Cisco Bug IDs: CSCvd29395.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:N)  
Pub Date
2017-07-18  
Published
2017-07-05  
Modified Date
2017-07-07  
Seq
2017-6711  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
422130 88038 CVE-2017-8421 https://sourceware.org/bugzilla/show_bug.cgi?id=21440  View
422131 88038 CVE-2017-8421 https://sourceware.org/bugzilla/show_bug.cgi?id=21440  View

Related JVN