Description
The Cisco Security Monitoring, Analysis and Response System (CS-MARS) 6.0.4 and earlier stores cleartext passwords in log/sysbacktrace.## files within error-logs.tar.gz archives, which allows context-dependent attackers to obtain sensitive information by reading these files.
References
- 36098 vdb-entry
- ADV-2009-2364 vdb-entry
- 20090821 Re: Clear Text Storage of Password in CS-MARS v6.0.4 and Earlier mailing-list
- http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCtb52450
- csmars-sysbacktrace-info-disclosure(52913) vdb-entry
- 20090821 Clear Text Storage of Password in CS-MARS v6.0.4 and Earlier mailing-list