CVE-2006-5806: Low severity Cisco Secure Desktop vulnerability
SSL VPN Client in Cisco Secure Desktop before 3.1.1.45, when configured to spawn a web browser after a successful connection, stores sensitive browser session information in a directory outside of the CSD vault and does not restrict the user from saving files outside of the vault, which is not cleared after the VPN connection terminates and allows local users to read unencrypted data.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-5806?
CVE-2006-5806 is considered a medium severity vulnerability due to the risk of sensitive information disclosure.
How do I fix CVE-2006-5806?
To mitigate CVE-2006-5806, update to Cisco Secure Desktop version 3.1.1.45 or later.
What are the consequences of CVE-2006-5806?
CVE-2006-5806 can lead to unauthorized access to sensitive browser session information if exploited.
Who is affected by CVE-2006-5806?
CVE-2006-5806 affects users of Cisco Secure Desktop versions prior to 3.1.1.45.
When was CVE-2006-5806 published?
CVE-2006-5806 was published in November 2006.