CVE-2007-4786

CVE-2007-4786 describes an information disclosure vulnerability in Cisco Adaptive Security Appliance (ASA) software versions 7.0, 7.1, 7.2, and 8.0. When AAA is enabled and the "test aaa" command is used, the ASA composes log messages containing cleartext passwords, which are then sent to remote syslog servers or stored locally. This allows attackers with network access to intercept or retrieve sensitive authentication credentials. The vulnerability is rated Medium severity with a CVSS score of 5.3, indicating an attack vector requiring adjacent network access and high complexity to exploit, but with a high impact on confidentiality. There is no known active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.