Authenticated information disclosure via unencrypted audit credentials

Information disclosure in Cisco Emergency Responder allows remote authenticated users to read sensitive credentials via audit logs. The audit logging component stores certain credentials without encryption, allowing an authenticated remote user who can access audit logs to obtain credentials normally unavailable to that user. Those credentials can then enable discovery and management of network devices; exploitation requires authenticated access to the system's audit logs.