CVE-2001-1098

Cisco PIX firewall manager (PFM) 4.3(2)g logs the enable password in plaintext in the pfm.log file, which could allow local users to obtain the password by reading the file.

Score

CVSS 2.0 2.1 Low

Status

Modified - cve@mitre.org

Published

2001-10-10

Last modified

2024-08-08

Affected products

• Pix Firewall Manager (Cisco)

References

• http://archives.neohapsis.com/archives/bugtraq/2001-10/0071.html
• http://www.kb.cert.org/vuls/id/639507
• http://www.securityfocus.com/bid/3419
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7265