Unscored CVE-2008-1155 EUVD-2008-1164GHSA-4898-hwxm-j2vf

Cisco Network Admission Control (NAC) Appliance 3.5.x, 3.6.x before 3.6.4.4, 4.0.x before 4.0.6, and 4.1.x before 4.1.2 allows remote attac…

Published Apr 16, 2008 · Updated Aug 7, 2024 · Assigned by cisco

Description

Cisco Network Admission Control (NAC) Appliance 3.5.x, 3.6.x before 3.6.4.4, 4.0.x before 4.0.6, and 4.1.x before 4.1.2 allows remote attackers to obtain the shared secret for the Clean Access Server (CAS) and Clean Access Manager (CAM) by sniffing error logs.

References

ADV-2008-1248 vdb-entry
cisco-nac-unauthorized-access(41849) vdb-entry
1019859 vdb-entry
28807 vdb-entry
20080416 Cisco Network Admission Control Shared Secret Vulnerability vendor-advisory
29822 third-party-advisory