Security Update:Cisco has released a security advisory to address a CRITICAL vulnerability in Cisco Elastic Services Controller (ESC)
Date and Time
Cisco has released a security advisory to address a CRITICALvulnerability in Cisco Elastic Services Controller (ESC).
Advanced Users: For a complete description of the vulnerabilities and effected systems, visit:
- Cisco Elastic Services Controller REST API Authentication Bypass Vulnerability at: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190507-esc-authbypass
AFFECTED SYSTEM - Versions:
- Cisco Elastic Services Controller running Software Release 4.1, 4.2, 4.3, or 4.4 when the REST API is enabled
WHAT’S THE PROBLEM?
An attacker could exploit this vulnerability to take control of an affected system.
WHAT DO I NEED TO DO?
Users and administrators are encouraged to go to the link listed above and review the Cisco Security Advisory.
- IT SECURITY at https://it.ucsf.edu/security