Description
The Cisco VPN 5000 Client for MacOS before 5.2.2 records the most recently used login password in plaintext when saving "Default Connection" settings, which could allow local users to gain privileges.
References (4)
Core 4
Core References
Patch, Vendor Advisory vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/5736
Patch, Vendor Advisory vendor-advisory
x_refsource_cisco
http://www.cisco.com/warp/public/707/vpn5k-client-multiple-vuln-pub.shtml
Patch, Vendor Advisory vdb-entry
x_refsource_xf
http://www.iss.net/security_center/static/10129.php
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://www.osvdb.org/7041
Scores
EPSS
0.0116
EPSS Percentile
63.8%
Details
Status
published
Products (2)
cisco/vpn_5000_client
5.1.2
cisco/vpn_5000_client
5.2.1
Published
Apr 02, 2003
Tracked Since
Feb 18, 2026