CVE-2017-6730
mediumpriority · track · 22EPSS 0.017 · 77 %ileEUUSEPSS · scored 2026-10-28
A vulnerability in the web-based GUI of Cisco Wide Area Application Services (WAAS) Central Manager could allow an unauthenticated, remote attacker to retrieve completed reports from an affected system, aka Information Disclosure. This vulnerability affects the following products if they are running an affected release of Cisco Wide Area Application Services (WAAS) Software and are configured to use the Central Manager function: Cisco Virtual Wide Area Application Services (vWAAS), Cisco Wide Area Application Services (WAAS) Appliances, Cisco Wide Area Application Services (WAAS) Modules. Only Cisco WAAS products that are configured with the Central Manager role are affected by this vulnerability. More Information: CSCvd87574. Known Affected Releases: 4.4(7) 6.2(1) 6.2(3). Known Fixed Releases: 6.3(0.228) 6.3(0.226) 6.2(3d)8 5.5(7b)17.
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
A vendor fix is available.
- FixedCisco Wide Area Application Services (WAAS)cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (5)
Products and version ranges known to be affected.
- cisco wide area application services= 4.4(7)nvdUScpe:2.3:a:cisco:wide_area_application_services:*:*:*:*:*:*:*:*
- cisco wide area application services= 6.2(1)nvdUScpe:2.3:a:cisco:wide_area_application_services:*:*:*:*:*:*:*:*
- cisco wide area application services= 6.2(3)nvdUScpe:2.3:a:cisco:wide_area_application_services:*:*:*:*:*:*:*:*
advisories (1)
Vendor and ecosystem advisories describing this.
- cisco-sa-20170705-waas1Cisco Wide Area Application Services Central Manager Information Disclosure Vulnerability2017-07-05csaf · cisco_csafUS
A vulnerability in the web-based GUI of Cisco Wide Area Application Services (WAAS) Central Manager could allow an unauthenticated, remote attacker to retrieve completed reports from an affected system. The vulnerability is due to a processing error in how the affected software applies role-based access control (RBAC) to URLs. An attacker could exploit this vulnerability by conducting a brute-force attack or guessing the report ID of a completed report and sending a crafted HTTP GET request with the ID to an affected system. A successful exploit could allow the attacker to download any completed report that was previously scheduled by a WAAS administrator via the Reports Central area in the WAAS Central Manager GUI of the affected system. There are no workarounds that address this vulnerability.
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (7)
External citations — patches, advisories, analysis.
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-waas1cnnvd
- http://www.securityfocus.com/bid/99481enisa_euvd
- http://www.securitytracker.com/id/1038825enisa_euvd
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-waas1enisa_euvd
- http://www.securityfocus.com/bid/99481Third Party AdvisoryVDB Entrynvd
- http://www.securitytracker.com/id/1038825Third Party AdvisoryVDB Entrynvd
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-waas1Vendor Advisorynvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan