Vulnerability in Cisco Adaptive Security Appliance Software

CVE-2007-4786

Cisco Adaptive Security Appliance (ASA) running PIX 7.0 before 7.0.7.1, 7.1 before 7.1.2.61, 7.2 before 7.2.2.34, and 8.0 before 8.0.2.11, when AAA is enabled, composes %ASA-5-111008 messages from the "test aaa" command with cleartext passwords and sends them over the network to a remote syslog server or places them in a local logging buffer, which allows context-dependent attackers to obtain sensitive information.

EPSS: 0.005 (39.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Weakness classification (CWE)

References

  • cve@mitre.org (x_refsource_SECUNIA, Third Party Advisory, Broken Link, third-party-advisory)
  • cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK, Broken Link)
  • cve@mitre.org (x_refsource_CONFIRM, US Government Resource, Third Party Advisory)
  • cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_XF)
  • cve@mitre.org (x_refsource_OSVDB, vdb-entry, Broken Link)
  • cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, Broken Link, x_refsource_BID)
  • cve@mitre.org (x_refsource_MISC, Broken Link, Vendor Advisory)
  • cve@mitre.org (US Government Resource, x_refsource_CERT-VN, Third Party Advisory, third-party-advisory)
  • cve@mitre.org (Third Party Advisory, vdb-entry, Broken Link, x_refsource_VUPEN)

Frequently asked questions

What is CVE-2007-4786?
CVE-2007-4786 is a medium-severity vulnerability in Cisco Adaptive Security Appliance Software, classified under Cleartext Transmission of Sensitive Information. CVSS score: 5.3/10. Published 2007-09-10.
How severe is CVE-2007-4786?
Medium severity. CVSS v3 base score is 5.3 out of 10.