CVE-2007-1068
Published Feb 22, 2007
Last updated 7 years ago
Overview
- Description
- The (1) TTLS CHAP, (2) TTLS MSCHAP, (3) TTLS MSCHAPv2, (4) TTLS PAP, (5) MD5, (6) GTC, (7) LEAP, (8) PEAP MSCHAPv2, (9) PEAP GTC, and (10) FAST authentication methods in Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client store transmitted authentication credentials in plaintext log files, which allows local users to obtain sensitive information by reading these files, aka CSCsg34423.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 7.2
- Impact score
- 10
- Exploitability score
- 3.9
- Vector string
- AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
- nvd@nist.gov
- CWE-255
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:secure_services_client:4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BDEFEA3C-0595-4A62-8ACA-EBC364BFAEBB"
},
{
"criteria": "cpe:2.3:a:cisco:secure_services_client:4.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3802F8EB-A1B9-42ED-B18F-6DDDE66D1DBD"
},
{
"criteria": "cpe:2.3:a:cisco:secure_services_client:4.0.51:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "63567540-B390-41DB-B3C8-C6F5E47914A6"
},
{
"criteria": "cpe:2.3:a:cisco:security_agent:5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E171031D-51C1-41BB-96E4-DFFF0C36B74B"
},
{
"criteria": "cpe:2.3:a:cisco:security_agent:5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F6DD0915-7671-42CD-8DF3-0B685389C528"
},
{
"criteria": "cpe:2.3:a:cisco:trust_agent:1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7AE07274-FF2E-4D38-8E7A-68535BA3B841"
},
{
"criteria": "cpe:2.3:a:cisco:trust_agent:2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A548227E-0736-44B4-AB8B-930D5B7FC5CF"
},
{
"criteria": "cpe:2.3:a:cisco:trust_agent:2.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6AEDB26D-F1DC-4B90-824B-B03EDE92C27A"
},
{
"criteria": "cpe:2.3:a:cisco:trust_agent:2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "957BB8CB-A3E9-4FB0-A60D-864FD14371C4"
},
{
"criteria": "cpe:2.3:a:meetinghouse:aegis_secureconnect_client:windows_platform:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AF7A9BA8-B2C9-417A-86FA-1672EA9886BF"
}
],
"operator": "OR"
}
]
}
]