CVE-2009-0742

Cisco Application Control Engine Module - Cleartext Password Storage via Username Command

Title source: llm
STIX 2.1

Description

The username command in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers and Cisco ACE 4710 Application Control Engine Appliance stores a cleartext password by default, which allows context-dependent attackers to obtain sensitive information.

References (1)

Core 1
Core References
Patch, Vendor Advisory vendor-advisory x_refsource_cisco
http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc82.shtml

Scores

EPSS 0.0106
EPSS Percentile 61.1%

Details

CWE
CWE-310
Status published
Products (2)
cisco/ace_4710
cisco/application_control_engine_module
Published Feb 26, 2009
Tracked Since Feb 18, 2026