CVE-2007-1068 : The (1) TTLS CHAP, (2) TTLS MSCHAP, (3) TTLS MSCHAPv2, (4) TTLS PAP, (5) MD5, (6

The (1) TTLS CHAP, (2) TTLS MSCHAP, (3) TTLS MSCHAPv2, (4) TTLS PAP, (5) MD5, (6) GTC, (7) LEAP, (8) PEAP MSCHAPv2, (9) PEAP GTC, and (10) FAST authentication methods in Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client store transmitted authentication credentials in plaintext log files, which allows local users to obtain sensitive information by reading these files, aka CSCsg34423.

Published 2007-02-22 01:28:00

Updated 2017-07-29 01:30:37

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2007-1068

Cisco » Security Agent » Version: 5.0
cpe:2.3:a:cisco:security_agent:5.0:*:*:*:*:*:*:*
Matching versions
Cisco » Security Agent » Version: 5.1
cpe:2.3:a:cisco:security_agent:5.1:*:*:*:*:*:*:*
Matching versions
Cisco » Secure Services Client » Version: 4.0
cpe:2.3:a:cisco:secure_services_client:4.0:*:*:*:*:*:*:*
Matching versions
Cisco » Secure Services Client » Version: 4.0.5
cpe:2.3:a:cisco:secure_services_client:4.0.5:*:*:*:*:*:*:*
Matching versions
Cisco » Secure Services Client » Version: 4.0.51
cpe:2.3:a:cisco:secure_services_client:4.0.51:*:*:*:*:*:*:*
Matching versions
Cisco » Trust Agent » Version: 2.1
cpe:2.3:a:cisco:trust_agent:2.1:*:*:*:*:*:*:*
Matching versions
Cisco » Trust Agent » Version: 1.0
cpe:2.3:a:cisco:trust_agent:1.0:*:*:*:*:*:*:*
Matching versions
Cisco » Trust Agent » Version: 2.0
cpe:2.3:a:cisco:trust_agent:2.0:*:*:*:*:*:*:*
Matching versions
Cisco » Trust Agent » Version: 2.0.1
cpe:2.3:a:cisco:trust_agent:2.0.1:*:*:*:*:*:*:*
Matching versions
Meetinghouse » Aegis Secureconnect Client » Version: Windows Platform
cpe:2.3:a:meetinghouse:aegis_secureconnect_client:windows_platform:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2007-1068

EPSS FAQ

0.06%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 26 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2007-1068

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.2	HIGH	AV:L/AC:L/Au:N/C:C/I:C/A:C	3.9	10.0	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

CWE ids for CVE-2007-1068

CWE-255

Assigned by: nvd@nist.gov (Primary)

References for CVE-2007-1068

Jump to

Vulnerability Details : CVE-2007-1068

Products affected by CVE-2007-1068

Exploit prediction scoring system (EPSS) score for CVE-2007-1068

CVSS scores for CVE-2007-1068

CWE ids for CVE-2007-1068

References for CVE-2007-1068