NVD

Id
88039  
Name
CVE-2017-6712  
Description
A vulnerability in certain commands of Cisco Elastic Services Controller could allow an authenticated, remote attacker to elevate privileges to root and run dangerous commands on the server. The vulnerability occurs because a tomcat user on the system can run certain shell commands, allowing the user to overwrite any file on the filesystem and elevate privileges to root. This vulnerability affects Cisco Elastic Services Controller prior to releases 2.3.1.434 and 2.3.2. Cisco Bug IDs: CSCvc76634.  
Reject
 
CVSS Version
2  
CVSS Score
9  
Severity
High  
CVSS Base Score
9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2017-07-05  
Modified Date
2017-07-07  
Seq
2017-6712  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
422132 88039 CVE-2017-8453 http://www.zerodayinitiative.com/advisories/ZDI-17-134/  View
422133 88039 CVE-2017-8453 https://www.foxitsoftware.com/support/security-bulletins.php  View
422134 88039 CVE-2017-8453 http://www.zerodayinitiative.com/advisories/ZDI-17-134/  View
422135 88039 CVE-2017-8453 https://www.foxitsoftware.com/support/security-bulletins.php  View

Related JVN