CVE-2007-4786

Published Sep 10, 2007 CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Description
Cisco Adaptive Security Appliance (ASA) running PIX 7.0 before 7.0.7.1, 7.1 before 7.1.2.61, 7.2 before 7.2.2.34, and 8.0 before 8.0.2.11, when AAA is enabled, composes %ASA-5-111008 messages from the "test aaa" command with cleartext passwords and sends them over the network to a remote syslog server or places them in a local logging buffer, which allows context-dependent attackers to obtain sensitive information.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Jan 17, 2025, 2:49 PM
Reserved
Sep 10, 2007, 12:00 AM
Status
Modified
Published
Sep 10, 2007, 9:17 PM
Modified
Jun 16, 2026, 10:44 PM