Cisco Adaptive Security Appliance (ASA) running PIX 7.0 before 7.0.7.1, 7.1 before 7.1.2.61, 7.2 before 7.2.2.34, and 8.0 before 8.0.2.11, when AAA is enabled, composes %ASA-5-111008 messages from the "test aaa" command with cleartext passwords and sends them over the network to a remote syslog server or places them in a local logging buffer, which allows context-dependent attackers to obtain sensitive information.
History

Fri, 17 Jan 2025 15:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2025-01-17T14:49:22.038Z

Reserved: 2007-09-10T00:00:00

Link: CVE-2007-4786

cve-icon Vulnrichment

Updated: 2024-08-07T15:08:33.807Z

cve-icon NVD

Status : Modified

Published: 2007-09-10T21:17:00.000

Modified: 2025-01-17T15:15:11.380

Link: CVE-2007-4786

cve-icon Redhat

No data.