CVE-2017-16661

CVE-2017-16661 describes an arbitrary file read vulnerability in Cacti version 1.1.27. An authenticated administrator can exploit this by manipulating the Log Path to a private directory and then making a specific request to read arbitrary files, such as /etc/passwd. This vulnerability has a CVSS score of 4.9 (Medium), indicating a network-based attack with low complexity, requiring high privileges, and resulting in high confidentiality impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.