The Cisco Security Monitoring, Analysis and Response System (CS-MARS) 6.0.4 and earlier stores cleartext passwords in log/sysbacktrace.## files within error-logs.tar.gz archives, which allows context-dependent attackers to obtain sensitive information by reading these files.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Cs-mars | Cisco | 4.1 | 4.1 |
Cs-mars | Cisco | 4.1.2 | 4.1.2 |
Cs-mars | Cisco | 4.1.3 | 4.1.3 |
Cs-mars | Cisco | 4.1.5 | 4.1.5 |
Cs-mars | Cisco | * | 6.0.4 |