Plaintext Password Storage Vulnerability in Cisco VPN 5000 Client for MacOS

CVE-2002-1491

Summary

The Cisco VPN 5000 Client for MacOS versions prior to 5.2.2 contains a vulnerability that exposes the most recently used login passwords in plaintext when users save their 'Default Connection' settings. This flaw can be exploited by local users to gain unauthorized access to sensitive information, potentially compromising user accounts and security protocols. It is crucial for users to update their software to mitigate this risk.

References