2.1

CVE-2006-5806

EPSS 0.09%
Published 08.11.2006 22:07:00
Last modified 09.04.2025 00:30:58
Source cve@mitre.org
Teams watchlist Login
Open Login

SSL VPN Client in Cisco Secure Desktop before 3.1.1.45, when configured to spawn a web browser after a successful connection, stores sensitive browser session information in a directory outside of the CSD vault and does not restrict the user from saving files outside of the vault, which is not cleared after the VPN connection terminates and allows local users to read unencrypted data.

Affected products Warnungen 0 Metrics 2 CWE 0 References 10

Data is provided by the National Vulnerability Database (NVD)

Cisco ≫ Secure Desktop Version <= 3.1.1.33

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.09%	0.262

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	2.1	3.9	2.9	AV:L/AC:L/Au:N/C:P/I:N/A:N

http://secunia.com/advisories/22747

http://securitytracker.com/id?1017195

http://www.cisco.com/warp/public/707/cisco-sa-20061108-csd.shtml

Vendor Advisory

http://www.osvdb.org/30306

http://www.securityfocus.com/bid/20964

http://www.vupen.com/english/advisories/2006/4409

https://exchange.xforce.ibmcloud.com/vulnerabilities/30129

https://nvd.nist.gov/vuln/detail/CVE-2006-5806

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2006-5806

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2006-5806

EUVD