CVE-2017-6730

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

A vulnerability in the web-based GUI of Cisco Wide Area Application Services (WAAS) Central Manager could allow an unauthenticated, remote attacker to retrieve completed reports from an affected system, aka Information Disclosure. This vulnerability affects the following products if they are running an affected release of Cisco Wide Area Application Services (WAAS) Software and are configured to use the Central Manager function: Cisco Virtual Wide Area Application Services (vWAAS), Cisco Wide Area Application Services (WAAS) Appliances, Cisco Wide Area Application Services (WAAS) Modules. Only Cisco WAAS products that are configured with the Central Manager role are affected by this vulnerability. More Information: CSCvd87574. Known Affected Releases: 4.4(7) 6.2(1) 6.2(3). Known Fixed Releases: 6.3(0.228) 6.3(0.226) 6.2(3d)8 5.5(7b)17.

Metrics

CVSS 3.0 5.3/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-200

Affected software

No affected versions have been published.

Timeline

Published: Jul 10, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-67317.5A vulnerability in Multicast Source Discovery Protocol (MSDP) ingress packet processing for Cisco IOS XR Software could allow an unauthentic CVE-2017-67326.7A vulnerability in the installation procedure for Cisco Prime Network Software could allow an authenticated, local attacker to elevate their CVE-2017-67336.1A vulnerability in the web-based application interface of the Cisco Identity Services Engine (ISE) portal could allow an unauthenticated, re CVE-2017-67345.4A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an authenticated, remote CVE-2017-67356.7A vulnerability in the backup and restore functionality of Cisco FireSIGHT System Software could allow an authenticated, local attacker to e CVE-2017-67368.8The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow CVE-2017-67378.8A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to r CVE-2017-67388.8The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow CVE-2017-67398.8A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to r CVE-2017-67408.8The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow CVE-2017-67418.8A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to r CVE-2017-67428.8A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to r