CVE-2007-4786

Published: Sep 10, 2007Modified: Apr 23, 2026

5.3

Vector

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.6 / Impact: 3.6

Source: NVD

Description

Cisco Adaptive Security Appliance (ASA) running PIX 7.0 before 7.0.7.1, 7.1 before 7.1.2.61, 7.2 before 7.2.2.34, and 8.0 before 8.0.2.11, when AAA is enabled, composes %ASA-5-111008 messages from the "test aaa" command with cleartext passwords and sends them over the network to a remote syslog server or places them in a local logging buffer, which allows context-dependent attackers to obtain sensitive information.

Affected (4)

Products: Cisco: Adaptive Security Appliance Software

1 product

Adaptive Security Appliance Software

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Cisco Adaptive Security Appliance Software	From 7.0 to 7.0.7.1
Cisco Adaptive Security Appliance Software	From 7.1 to 7.1.2.61
Cisco Adaptive Security Appliance Software	From 7.2 to 7.2.2.34
Cisco Adaptive Security Appliance Software	From 8.0 to 8.0.2.11

Related CWEs

Cleartext Transmission of Sensitive Information

The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

References (18)

http://osvdb.org/37499

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/26677

Source: cve@mitre.org

Broken LinkThird Party Advisory

http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsj72903

Source: cve@mitre.org

Broken LinkVendor Advisory

http://www.kb.cert.org/vuls/id/563673

Source: cve@mitre.org

Third Party AdvisoryUS Government Resource

http://www.kb.cert.org/vuls/id/MIMG-74ZK93

Source: cve@mitre.org

Third Party AdvisoryUS Government Resource

http://www.securityfocus.com/bid/25548

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

http://www.securitytracker.com/id?1018660

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

http://www.vupen.com/english/advisories/2007/3076

Source: cve@mitre.org

Broken LinkThird Party Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/36473

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://osvdb.org/37499

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://secunia.com/advisories/26677

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkThird Party Advisory

http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsj72903

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkVendor Advisory

http://www.kb.cert.org/vuls/id/563673

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

http://www.kb.cert.org/vuls/id/MIMG-74ZK93

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

http://www.securityfocus.com/bid/25548

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkThird Party AdvisoryVDB Entry

http://www.securitytracker.com/id?1018660

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkThird Party AdvisoryVDB Entry

http://www.vupen.com/english/advisories/2007/3076

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkThird Party Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/36473

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

Timeline

No history available yet.