CVE-2007-4786: Medium severity Cisco Adaptive Security Appliance Software vulnerability
Cisco Adaptive Security Appliance (ASA) running PIX 7.0 before 7.0.7.1, 7.1 before 7.1.2.61, 7.2 before 7.2.2.34, and 8.0 before 8.0.2.11, when AAA is enabled, composes %ASA-5-111008 messages from the "test aaa" command with cleartext passwords and sends them over the network to a remote syslog server or places them in a local logging buffer, which allows context-dependent attackers to obtain sensitive information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-4786?
CVE-2007-4786 is classified as a high severity vulnerability due to the potential exposure of cleartext passwords over the network.
How do I fix CVE-2007-4786?
To fix CVE-2007-4786, upgrade your Cisco Adaptive Security Appliance software to a version that is not vulnerable, specifically to 7.0.7.1 or higher, 7.1.2.61 or higher, 7.2.2.34 or higher, or 8.0.2.11 or higher.
What versions of Cisco ASA are affected by CVE-2007-4786?
CVE-2007-4786 affects Cisco Adaptive Security Appliance versions running PIX 7.0 before 7.0.7.1, 7.1 before 7.1.2.61, 7.2 before 7.2.2.34, and 8.0 before 8.0.2.11.
What type of information is exposed in CVE-2007-4786?
CVE-2007-4786 exposes cleartext passwords through %ASA-5-111008 messages sent over the network.
Is CVE-2007-4786 related to remote access?
Yes, CVE-2007-4786 is related to remote access as it involves the transmission of authentication messages to a remote syslog server.