CVE-2006-5806
SSL VPN Client in Cisco Secure Desktop before 3.1.1.45, when configured to spawn a web browser...
SSL VPN Client in Cisco Secure Desktop before 3.1.1.45, when configured to spawn a web browser after a successful connection, stores sensitive browser session information in a directory outside of the CSD vault and does not restrict the user from saving files outside of the vault, which is not cleared after the VPN connection terminates and allows local users to read unencrypted data.
Exploit likelihood
What each source reports
NVD Score used
SSL VPN Client in Cisco Secure Desktop before 3.1.1.45, when configured to spawn a web browser after a successful connection, stores sensitive browser session information in a directory outside of the CSD vault and does not restrict the user from saving files outside of the vault, which is not cleared after the VPN connection terminates and allows local users to read unencrypted data.
- Record
CVE-2006-5806- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
SSL VPN Client in Cisco Secure Desktop before 3.1.1.45, when configured to spawn a web browser after a successful connection, stores sensitive browser session information in a directory outside of the CSD vault and does not restrict the user from saving files outside of the vault, which is not cleared after the VPN connection terminates and allows local users to read unencrypted data.
- Record
CVE-2006-5806- Updated
- 2026-11-02
EUVDEUVD-2006-5790 No score
SSL VPN Client in Cisco Secure Desktop before 3.1.1.45, when configured to spawn a web browser after a successful connection, stores sensitive browser session information in a directory outside of the CSD vault and does not restrict the user from saving files outside of the vault, which is not cleared after the VPN connection terminates and allows local users to read unencrypted data.
- Record
EUVD-2006-5790- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-v6m5-m945-2767 No score
SSL VPN Client in Cisco Secure Desktop before 3.1.1.45, when configured to spawn a web browser...
SSL VPN Client in Cisco Secure Desktop before 3.1.1.45, when configured to spawn a web browser after a successful connection, stores sensitive browser session information in a directory outside of the CSD vault and does not restrict the user from saving files outside of the vault, which is not cleared after the VPN connection terminates and allows local users to read unencrypted data.
- Record
GHSA-v6m5-m945-2767- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-5806 is a low vulnerability (CVSS 2.1) in Cisco Secure Desktop, published November 8, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.34%, the 27th percentile. No source names a fixed version.
References
securitytracker.com/id?1017195
exchange.xforce.ibmcloud.com/vulnerabilities/30129
secunia.com/advisories/22747
osvdb.org/30306
cisco.com/warp/public/707/cisco-sa-20061108-csd.shtml
vupen.com/english/advisories/2006/4409
securityfocus.com/bid/20964
nvd.nist.gov/vuln/detail/CVE-2006-5806
github.com/advisories/GHSA-v6m5-m945-2767