CVE-2017-6710

Name of the Vulnerable Software and Affected Versions Cisco Virtual Network Function (VNF) Element Manager versions prior to 5.0.4 and 5.1.4

Description A vulnerability in the Cisco Virtual Network Function (VNF) Element Manager could allow an authenticated, remote attacker to elevate privileges and run commands in the context of the root user on the server. This issue arises from command settings that permit users to specify arbitrary commands to run as root on the server, which an attacker could exploit to elevate privileges.

Recommendations For versions prior to 5.0.4, update to version 5.0.4 or later to resolve the issue. For versions prior to 5.1.4, update to version 5.1.4 or later to resolve the issue.