VulnerabilityModified
CVE-2002-1491
The Cisco VPN 5000 Client for MacOS before 5.2.2 records the most recently used login password in plaintext when saving "Default Connection" settings, which could allow local users to gain privileges.
MEDIUM 5.0EPSS 1.16%
Does this matter?
Lower severity and a low EPSS score (1.16%). Track it; it rarely justifies an emergency change on its own.
Description
The Cisco VPN 5000 Client for MacOS before 5.2.2 records the most recently used login password in plaintext when saving "Default Connection" settings, which could allow local users to gain privileges.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 1.16% probability · 65th percentile
- CISA KEV
- Not listed
- Affected
- cisco/vpn 5000 client
- Source
- cve@mitre.org
References
- http://www.cisco.com/warp/public/707/vpn5k-client-multiple-vuln-pub.shtmlPatch, Vendor Advisory
- http://www.iss.net/security_center/static/10129.phpPatch, Vendor Advisory
- http://www.osvdb.org/7041
- http://www.securityfocus.com/bid/5736Patch, Vendor Advisory
- http://www.cisco.com/warp/public/707/vpn5k-client-multiple-vuln-pub.shtmlPatch, Vendor Advisory
- http://www.iss.net/security_center/static/10129.phpPatch, Vendor Advisory
- http://www.osvdb.org/7041
- http://www.securityfocus.com/bid/5736Patch, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.