Description
Cisco Network Admission Control (NAC) Appliance 3.5.x, 3.6.x before 3.6.4.4, 4.0.x before 4.0.6, and 4.1.x before 4.1.2 allows remote attackers to obtain the shared secret for the Clean Access Server (CAS) and Clean Access Manager (CAM) by sniffing error logs.
References (6)
Core 6
Core References
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2008/1248/references
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/41849
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id?1019859
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/28807
Patch, Vendor Advisory vendor-advisory
x_refsource_cisco
http://www.cisco.com/en/US/products/products_security_advisory09186a008097bea0.shtml
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/29822
Scores
EPSS
0.0257
EPSS Percentile
83.3%
Details
CWE
CWE-200
Status
published
Products (20)
cisco/network_admission_control
3.5
cisco/network_admission_control
3.6
cisco/network_admission_control
3.6.0
cisco/network_admission_control
3.6.0.1
cisco/network_admission_control
3.6.1.1
cisco/network_admission_control
3.6.2.1
cisco/network_admission_control
3.6.2.2
cisco/network_admission_control
3.6.4.1
cisco/network_admission_control
3.6.4.2
cisco/network_admission_control
4.0
... and 10 more
Published
Apr 16, 2008
Tracked Since
Feb 18, 2026