vulnwire
7.2high

CVE-2007-1068

The (1) TTLS CHAP, (2) TTLS MSCHAP, (3) TTLS MSCHAPv2, (4) TTLS PAP, (5) MD5, (6) GTC, (7) LEAP, (8) PEAP MSCHAPv2, (9) PEAP GTC, and (10)…

Published 19 y ago · modified 4 mo ago · JSON

CVSS
7.2
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.4%
percentile 30%
Public exploits
0
none known

The (1) TTLS CHAP, (2) TTLS MSCHAP, (3) TTLS MSCHAPv2, (4) TTLS PAP, (5) MD5, (6) GTC, (7) LEAP, (8) PEAP MSCHAPv2, (9) PEAP GTC, and (10) FAST authentication methods in Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client store transmitted authentication credentials in plaintext log files, which allows local users to obtain sensitive information by reading these files, aka CSCsg34423.

Exploit prediction (EPSS)

0.36% probability of exploitation in the next 30 days, higher than 30% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.07.2AV:L/AC:L/Au:N/C:C/I:C/A:C

Classification

Weakness
  • CWE-255 Credentials Management Errors

References

  • secunia.com /advisories/24258 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • osvdb.org /33046 · vdb-entry, x_refsource_OSVDB, x_transferred
  • vupen.com /english/advisories/2007/0690 · vdb-entry, x_refsource_VUPEN, x_transferred
  • securityfocus.com /bid/22648 · vdb-entry, x_refsource_BID, x_transferred
  • cisco.com /warp/public/707/cisco-sa-20070221-supplicant.shtml · vendor-advisory, x_refsource_CISCO, x_transferred
  • securitytracker.com /id?1017683 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/32626 · vdb-entry, x_refsource_XF, x_transferred
  • securitytracker.com /id?1017684 · vdb-entry, x_refsource_SECTRACK, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.