Information Disclosure in Cisco PIX Firewall Manager 4.3(2)g

CVE-2001-1098

Summary

The Cisco PIX Firewall Manager version 4.3(2)g is susceptible to information disclosure vulnerabilities due to the logging of enable passwords in plaintext within its pfm.log file. This configuration inadequacy allows local users with access to the log file to easily obtain sensitive credentials, potentially leading to unauthorized access and compromising the security of the firewall system.

References