CVE-2007-4786
Cisco Adaptive Security Appliance (ASA) running PIX 7.0 before 7.0.7.1, 7.1 before 7.1.2.61, 7.2 before 7.2.2.34, and 8.0 before 8.0.2.11, when AAA is enabled, composes %ASA-5-111008 messages from the "test aaa" command with cleartext passwords and…
Does this matter?
Lower severity and a low EPSS score (0.50%). Track it; it rarely justifies an emergency change on its own.
Description
Cisco Adaptive Security Appliance (ASA) running PIX 7.0 before 7.0.7.1, 7.1 before 7.1.2.61, 7.2 before 7.2.2.34, and 8.0 before 8.0.2.11, when AAA is enabled, composes %ASA-5-111008 messages from the "test aaa" command with cleartext passwords and sends them over the network to a remote syslog server or places them in a local logging buffer, which allows context-dependent attackers to obtain sensitive information.
- CVSS 3.1
- 5.3 MEDIUMCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 0.50% probability · 41th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-319
- Affected
- cisco/adaptive security appliance software
- Source
- cve@mitre.org
References
- http://osvdb.org/37499Broken Link
- http://secunia.com/advisories/26677Broken Link, Third Party Advisory
- http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsj72903Broken Link, Vendor Advisory
- http://www.kb.cert.org/vuls/id/563673Third Party Advisory, US Government Resource
- http://www.kb.cert.org/vuls/id/MIMG-74ZK93Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/25548Broken Link, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1018660Broken Link, Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2007/3076Broken Link, Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36473Third Party Advisory, VDB Entry
- http://osvdb.org/37499Broken Link
- http://secunia.com/advisories/26677Broken Link, Third Party Advisory
- http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsj72903Broken Link, Vendor Advisory
- http://www.kb.cert.org/vuls/id/563673Third Party Advisory, US Government Resource
- http://www.kb.cert.org/vuls/id/MIMG-74ZK93Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/25548Broken Link, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1018660Broken Link, Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2007/3076Broken Link, Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36473Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.