CVE-2009-0742

Опубликовано: 26 фев. 2009

Источник: nvd

CVSS2: 7.8

EPSS Низкий

Описание

The username command in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers and Cisco ACE 4710 Application Control Engine Appliance stores a cleartext password by default, which allows context-dependent attackers to obtain sensitive information.

Комментарий

Note that CVE-2009-0742 is not referenced on the vendor advisory page at:

http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc82.shtml

Ссылки

http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc82.shtml
Patch
Vendor Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc82.shtml
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:h:cisco:application_control_engine_module:*:*:*:*:*:*:*:*

Одно из

cpe:2.3:h:cisco:catalyst_6500:*:*:*:*:*:*:*:*

cpe:2.3:h:cisco:catalyst_7600:*:*:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:h:cisco:ace_4710:*:*:*:*:*:*:*:*

EPSS

Процентиль: 48%

0.00251

Низкий

7.8 High

CVSS2

Дефекты

CWE-310

Связанные уязвимости

GHSA-4pjg-hm2r-rj25

github

почти 4 года назад