Unrated severityNVD Advisory· Published Feb 22, 2007· Updated Apr 23, 2026
CVE-2007-1068
CVE-2007-1068
Description
The (1) TTLS CHAP, (2) TTLS MSCHAP, (3) TTLS MSCHAPv2, (4) TTLS PAP, (5) MD5, (6) GTC, (7) LEAP, (8) PEAP MSCHAPv2, (9) PEAP GTC, and (10) FAST authentication methods in Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client store transmitted authentication credentials in plaintext log files, which allows local users to obtain sensitive information by reading these files, aka CSCsg34423.
Affected products
10cpe:2.3:a:cisco:secure_services_client:4.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:cisco:secure_services_client:4.0:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:secure_services_client:4.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:secure_services_client:4.0.51:*:*:*:*:*:*:*
cpe:2.3:a:cisco:security_agent:5.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:cisco:security_agent:5.0:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:security_agent:5.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:trust_agent:1.0:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:cisco:trust_agent:1.0:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:trust_agent:2.0:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:trust_agent:2.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:trust_agent:2.1:*:*:*:*:*:*:*
- cpe:2.3:a:meetinghouse:aegis_secureconnect_client:windows_platform:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
8- www.cisco.com/warp/public/707/cisco-sa-20070221-supplicant.shtmlnvdPatchVendor Advisory
- secunia.com/advisories/24258nvdVendor Advisory
- www.vupen.com/english/advisories/2007/0690nvdVendor Advisory
- osvdb.org/33046nvd
- www.securityfocus.com/bid/22648nvd
- www.securitytracker.com/idnvd
- www.securitytracker.com/idnvd
- exchange.xforce.ibmcloud.com/vulnerabilities/32626nvd
News mentions
0No linked articles in our index yet.