CVE-2017-6681

Name of the Vulnerable Software and Affected Versions Cisco Ultra Services Framework version 21.0.0

Description A vulnerability in the AutoVNF VNFStagingView class could allow an unauthenticated, remote attacker to execute a relative path traversal attack, enabling the attacker to read sensitive files on the system.

Recommendations For version 21.0.0, update to a newer version that contains a fix for this issue, as the current version allows an attacker to read sensitive files on the system. At the moment, there is no information about a newer version that contains a fix for this vulnerability.