CVE-2006-0561

CVE-2006-0561 describes a vulnerability in Cisco Secure Access Control Server (ACS) 3.x for Windows, where administrator passwords and the master key are stored in the registry with insecure permissions. This allows local users and remote administrators to decrypt these credentials by leveraging Microsoft's cryptographic API. The vulnerability carries a CVSS score of 7.2, indicating high severity with local access, low attack complexity, and complete compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.