Описание
Cisco Secure Desktop (CSD) does not require that the ClearPageFileAtShutdown (aka CCE-Winv2.0-407) registry value equals 1, which might allow local users to read certain memory pages that were written during another user's SSL VPN session.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:cisco:secure_desktop:*:*:*:*:*:*:*:*
EPSS
Процентиль: 21%
0.00068
Низкий
5.5 Medium
CVSS3
2.1 Low
CVSS2
Дефекты
NVD-CWE-Other
CWE-125
Связанные уязвимости
CVSS3: 5.5
github
почти 4 года назад
Cisco Secure Desktop (CSD) does not require that the ClearPageFileAtShutdown (aka CCE-Winv2.0-407) registry value equals 1, which might allow local users to read certain memory pages that were written during another user's SSL VPN session.
EPSS
Процентиль: 21%
0.00068
Низкий
5.5 Medium
CVSS3
2.1 Low
CVSS2
Дефекты
NVD-CWE-Other
CWE-125