{"api_version":"1","generated_at":"2026-07-23T08:29:21+00:00","cve":"CVE-2007-1068","urls":{"html":"https://cve.report/CVE-2007-1068","api":"https://cve.report/api/cve/CVE-2007-1068.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2007-1068","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2007-1068"},"summary":{"title":"CVE-2007-1068","description":"The (1) TTLS CHAP, (2) TTLS MSCHAP, (3) TTLS MSCHAPv2, (4) TTLS PAP, (5) MD5, (6) GTC, (7) LEAP, (8) PEAP MSCHAPv2, (9) PEAP GTC, and (10) FAST authentication methods in Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client store transmitted authentication credentials in plaintext log files, which allows local users to obtain sensitive information by reading these files, aka CSCsg34423.","state":"PUBLISHED","assigner":"mitre","published_at":"2007-02-22 01:28:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-255","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.2","severity":"","vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","data":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"http://www.securitytracker.com/id?1017683","name":"http://www.securitytracker.com/id?1017683","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityTracker: Cisco Secure Services Client Lets Local Users Gain System Privileges and Also View Passwords","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2007/0690","name":"http://www.vupen.com/english/advisories/2007/0690","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/24258","name":"http://secunia.com/advisories/24258","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Cisco Secure Services Client Multiple Vulnerabilities - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://osvdb.org/33046","name":"http://osvdb.org/33046","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/32626","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/32626","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/22648","name":"http://www.securityfocus.com/bid/22648","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Cisco 802.1X Authentication Deployment Products Multiple Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.securitytracker.com/id?1017684","name":"http://www.securitytracker.com/id?1017684","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityTracker: Cisco Trust Agent Lets Local Users Gain System Privileges and Also View Passwords","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20070221-supplicant.shtml","name":"http://www.cisco.com/warp/public/707/cisco-sa-20070221-supplicant.shtml","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"Cisco - Networking, Cloud, and Cybersecurity Solutions","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-1068","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-1068","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2007","cve_id":"1068","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"secure_services_client","cpe6":"4.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"1068","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"secure_services_client","cpe6":"4.0.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"1068","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"secure_services_client","cpe6":"4.0.51","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"1068","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"security_agent","cpe6":"5.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"1068","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"security_agent","cpe6":"5.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"1068","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"trust_agent","cpe6":"1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"1068","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"trust_agent","cpe6":"2.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"1068","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"trust_agent","cpe6":"2.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"1068","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"trust_agent","cpe6":"2.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"1068","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"meetinghouse","cpe5":"aegis_secureconnect_client","cpe6":"windows_platform","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T12:43:22.534Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"24258","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/24258"},{"name":"33046","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://osvdb.org/33046"},{"name":"ADV-2007-0690","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2007/0690"},{"name":"22648","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/22648"},{"name":"20070221 Multiple Vulnerabilities in 802.1X Supplicant","tags":["vendor-advisory","x_refsource_CISCO","x_transferred"],"url":"http://www.cisco.com/warp/public/707/cisco-sa-20070221-supplicant.shtml"},{"name":"1017683","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id?1017683"},{"name":"cisco-cssc-password-information-disclosure(32626)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/32626"},{"name":"1017684","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id?1017684"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2007-02-21T00:00:00.000Z","descriptions":[{"lang":"en","value":"The (1) TTLS CHAP, (2) TTLS MSCHAP, (3) TTLS MSCHAPv2, (4) TTLS PAP, (5) MD5, (6) GTC, (7) LEAP, (8) PEAP MSCHAPv2, (9) PEAP GTC, and (10) FAST authentication methods in Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client store transmitted authentication credentials in plaintext log files, which allows local users to obtain sensitive information by reading these files, aka CSCsg34423."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-07-28T12:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"24258","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/24258"},{"name":"33046","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://osvdb.org/33046"},{"name":"ADV-2007-0690","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2007/0690"},{"name":"22648","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/22648"},{"name":"20070221 Multiple Vulnerabilities in 802.1X Supplicant","tags":["vendor-advisory","x_refsource_CISCO"],"url":"http://www.cisco.com/warp/public/707/cisco-sa-20070221-supplicant.shtml"},{"name":"1017683","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id?1017683"},{"name":"cisco-cssc-password-information-disclosure(32626)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/32626"},{"name":"1017684","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id?1017684"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2007-1068","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The (1) TTLS CHAP, (2) TTLS MSCHAP, (3) TTLS MSCHAPv2, (4) TTLS PAP, (5) MD5, (6) GTC, (7) LEAP, (8) PEAP MSCHAPv2, (9) PEAP GTC, and (10) FAST authentication methods in Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client store transmitted authentication credentials in plaintext log files, which allows local users to obtain sensitive information by reading these files, aka CSCsg34423."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"24258","refsource":"SECUNIA","url":"http://secunia.com/advisories/24258"},{"name":"33046","refsource":"OSVDB","url":"http://osvdb.org/33046"},{"name":"ADV-2007-0690","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2007/0690"},{"name":"22648","refsource":"BID","url":"http://www.securityfocus.com/bid/22648"},{"name":"20070221 Multiple Vulnerabilities in 802.1X Supplicant","refsource":"CISCO","url":"http://www.cisco.com/warp/public/707/cisco-sa-20070221-supplicant.shtml"},{"name":"1017683","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1017683"},{"name":"cisco-cssc-password-information-disclosure(32626)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/32626"},{"name":"1017684","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1017684"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2007-1068","datePublished":"2007-02-22T01:00:00.000Z","dateReserved":"2007-02-21T00:00:00.000Z","dateUpdated":"2024-08-07T12:43:22.534Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2007-02-22 01:28:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-255","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_services_client:4.0:*:*:*:*:*:*:*","matchCriteriaId":"BDEFEA3C-0595-4A62-8ACA-EBC364BFAEBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_services_client:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3802F8EB-A1B9-42ED-B18F-6DDDE66D1DBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_services_client:4.0.51:*:*:*:*:*:*:*","matchCriteriaId":"63567540-B390-41DB-B3C8-C6F5E47914A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:security_agent:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E171031D-51C1-41BB-96E4-DFFF0C36B74B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:security_agent:5.1:*:*:*:*:*:*:*","matchCriteriaId":"F6DD0915-7671-42CD-8DF3-0B685389C528"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:trust_agent:1.0:*:*:*:*:*:*:*","matchCriteriaId":"7AE07274-FF2E-4D38-8E7A-68535BA3B841"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:trust_agent:2.0:*:*:*:*:*:*:*","matchCriteriaId":"A548227E-0736-44B4-AB8B-930D5B7FC5CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:trust_agent:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6AEDB26D-F1DC-4B90-824B-B03EDE92C27A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:trust_agent:2.1:*:*:*:*:*:*:*","matchCriteriaId":"957BB8CB-A3E9-4FB0-A60D-864FD14371C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:meetinghouse:aegis_secureconnect_client:windows_platform:*:*:*:*:*:*:*","matchCriteriaId":"AF7A9BA8-B2C9-417A-86FA-1672EA9886BF"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2007","CveId":"1068","Ordinal":"1","Title":"CVE-2007-1068","CVE":"CVE-2007-1068","Year":"2007"},"notes":[{"CveYear":"2007","CveId":"1068","Ordinal":"1","NoteData":"The (1) TTLS CHAP, (2) TTLS MSCHAP, (3) TTLS MSCHAPv2, (4) TTLS PAP, (5) MD5, (6) GTC, (7) LEAP, (8) PEAP MSCHAPv2, (9) PEAP GTC, and (10) FAST authentication methods in Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client store transmitted authentication credentials in plaintext log files, which allows local users to obtain sensitive information by reading these files, aka CSCsg34423.","Type":"Description","Title":"CVE-2007-1068"},{"CveYear":"2007","CveId":"1068","Ordinal":"2","NoteData":"2007-02-21","Type":"Other","Title":"Published"},{"CveYear":"2007","CveId":"1068","Ordinal":"3","NoteData":"2017-07-28","Type":"Other","Title":"Modified"}]}}}