Cisco Adaptive Security Appliance (ASA) running PIX 7.0 before 7.0.7.1, 7.1 before 7.1.2.61, 7.2 before 7.2.2.34, and 8.0 before 8.0.2.11, when AAA is enabled, composes %ASA-5-111008 messages from the "test aaa" command with cleartext passwords and sends them over the network to a remote syslog server or places them in a local logging buffer, which allows context-dependent attackers to obtain sensitive information.
Metrics
Affected Vendors & Products
References
History
Fri, 17 Jan 2025 15:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|

Status: PUBLISHED
Assigner: mitre
Published: 2007-09-10T21:00:00
Updated: 2025-01-17T14:49:22.038Z
Reserved: 2007-09-10T00:00:00
Link: CVE-2007-4786

Updated: 2024-08-07T15:08:33.807Z

Status : Modified
Published: 2007-09-10T21:17:00.000
Modified: 2025-01-17T15:15:11.380
Link: CVE-2007-4786

No data.