CVE-2009-0742 - The username command in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers and Cisco ACE 4710 Application Control Engine Appliance stores a cleartext password by default, which allows context-dependent attackers to obtain sensitive information

Back Back to CVE browser

HIGH

The username command in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers and Cisco ACE 4710 Application Control Engine Appliance stores a cleartext password by default, which allows context-dependent attackers to obtain sensitive information

Published Feb 26, 2009

7.8

HIGH

CVSS 2.0

EPSS 1.06%

Description

The username command in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers and Cisco ACE 4710 Application Control Engine Appliance stores a cleartext password by default, which allows context-dependent attackers to obtain sensitive information.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-310

References (2)

http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc82.shtml
vendor-advisoryx_refsource_CISCOPatchVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-0742
Advisory

Link	Providers	Tags
http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc82.shtml		vendor-advisoryx_refsource_CISCOPatchVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-0742		Advisory