CVE-2018-0106: Infoleak
A vulnerability in the ConfD server of the Cisco Elastic Services Controller (ESC) could allow an unauthenticated, local attacker to access sensitive information on a targeted system. The vulnerability is due to insufficient security restrictions. An attacker could exploit this vulnerability by accessing unauthorized information within the ConfD directory and file structure. Successful exploitation could allow the attacker to view sensitive information. Cisco Bug IDs: CSCvg00221.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-0106?
CVE-2018-0106 is rated as a high-severity vulnerability due to its potential to expose sensitive information.
How do I fix CVE-2018-0106?
To fix CVE-2018-0106, update the Cisco Elastic Services Controller to the latest version provided by Cisco.
Who is affected by CVE-2018-0106?
CVE-2018-0106 affects users of the Cisco Elastic Services Controller where an unauthenticated local attacker could exploit the vulnerability.
What type of attack can exploit CVE-2018-0106?
CVE-2018-0106 can be exploited by an unauthenticated, local attacker to gain access to sensitive information.
What is the cause of CVE-2018-0106?
CVE-2018-0106 is caused by insufficient security restrictions in the ConfD server of the Cisco Elastic Services Controller.