CVE-2017-6697: A vulnerability in the web interface of Cisco Elastic Services Controllers could allow an authenticated, re...

Security readout for executives and security teams

CVE-2017-6697 is a credential disclosure issue in the web interface of Cisco Elastic Services Controller. A logged-in remote attacker could access sensitive system credentials stored on an affected system. The source names Cisco ESC release 2.2(9.76) as affected, but does not provide CVSS, CWE, or fix details in the bundle. Exposure is most likely in environments running Cisco Elastic Services Controller, especially release 2.2(9.76), with the web interface reachable by authenticated users. Internet exposure is not stated in the sources. Prioritize remediation if Cisco ESC manages sensitive infrastructure or stores credentials used across production systems. The issue is authenticated, but exposed credentials can create broader compromise paths after one account is misused. Mitigation focus: Review Cisco advisory cisco-sa-20170607-esc9 for fixed releases and vendor guidance.; Restrict ESC web interface access to trusted administrative networks.; Remove unnecessary ESC web interface accounts and privileges..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.