Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Back

CVE-2006-5806

SSL VPN Client in Cisco Secure Desktop before 3.1.1.45, when configured to spawn a web browser after a successful connection, stores…

Low2.1EPSS 0.34%
Published
Updated
Reserved
Assigned by
mitre

Description

SSL VPN Client in Cisco Secure Desktop before 3.1.1.45, when configured to spawn a web browser after a successful connection, stores sensitive browser session information in a directory outside of the CSD vault and does not restrict the user from saving files outside of the vault, which is not cleared after the VPN connection terminates and allows local users to read unencrypted data.

Scores

CVSS scores of CVE-2006-5806, by who scored it
Scored byCVSSScoreVector
NVDNVD · Modified2.0Low2.1AV:L/AC:L/Au:N/C:P/I:N/A:N
EPSS (exploitation in 30 days)
0.34% · top 72% of all CVEs (6 Nov 2026)
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Low 2.1.

Weakness

  • n/a

Affected products

  • n/a

    • affected n/a

References (7)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2006-5806 badge
[![CVE-2006-5806](https://trackcve.app/badge/CVE-2006-5806.svg)](https://trackcve.app/cve/CVE-2006-5806)

Record last updated .