Cisco Security Advisory – The Cisco Clean Access Manager (CAM) and Cisco Clean Access Server (CAS) suffer from an unchangeable shared secret vulnerability. Also, manual backups of the database (‘snapshots’) taken on the CAM are susceptible to brute force download attacks. A malicious user can guess the file name and download it without authentication. The file itself is not encrypted or otherwise protected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/53410/cisco-sa-20070103-CleanAccess.txt
Source: https://packetstormsecurity.com/files/53410/Cisco-Security-Advisory-20070103-CleanAccess.html