Description
Cisco Secure Desktop (CSD) does not require that the ClearPageFileAtShutdown (aka CCE-Winv2.0-407) registry value equals 1, which might allow local users to read certain memory pages that were written during another user's SSL VPN session.
References
- 20061009 Limitations in Cisco Secure Desktop vendor-advisory
- 20410 vdb-entry
- 1017018 vdb-entry