CVE-2017-6730: Infoleak
First published: Mon Jul 10 2017(Updated: )
A vulnerability in the web-based GUI of Cisco Wide Area Application Services (WAAS) Central Manager could allow an unauthenticated, remote attacker to retrieve completed reports from an affected system, aka Information Disclosure. This vulnerability affects the following products if they are running an affected release of Cisco Wide Area Application Services (WAAS) Software and are configured to use the Central Manager function: Cisco Virtual Wide Area Application Services (vWAAS), Cisco Wide Area Application Services (WAAS) Appliances, Cisco Wide Area Application Services (WAAS) Modules. Only Cisco WAAS products that are configured with the Central Manager role are affected by this vulnerability. More Information: CSCvd87574. Known Affected Releases: 4.4(7) 6.2(1) 6.2(3). Known Fixed Releases: 6.3(0.228) 6.3(0.226) 6.2(3d)8 5.5(7b)17.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Wide Area Application Services | =4.4\(7\) | |
| Cisco Wide Area Application Services | =6.2\(1\) | |
| Cisco Wide Area Application Services | =6.2\(3\) |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-6730?
CVE-2017-6730 has been assigned a medium severity rating due to the potential for information disclosure.
How do I fix CVE-2017-6730?
To mitigate CVE-2017-6730, upgrade to the latest patched version of Cisco Wide Area Application Services as provided by Cisco.
What systems are affected by CVE-2017-6730?
CVE-2017-6730 affects Cisco Wide Area Application Services versions 4.4(7), 6.2(1), and 6.2(3).
Can CVE-2017-6730 be exploited remotely?
Yes, CVE-2017-6730 can be exploited remotely by an unauthenticated attacker.
What kind of information can be disclosed due to CVE-2017-6730?
CVE-2017-6730 allows attackers to retrieve completed reports from the affected Cisco WAAS Central Manager.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/weakness
- agent/references
- agent/last-modified-date
- agent/severity
- agent/description
- agent/first-publish-date
- agent/event
- agent/trending
- agent/tags
- agent/source
- vendor/cisco
- canonical/cisco wide area application services
- version/cisco wide area application services/4.4\(7\)
- version/cisco wide area application services/6.2\(1\)
- version/cisco wide area application services/6.2\(3\)