Lucene search

[email protected]CVE-2002-1096

HistoryOct 04, 2002 - 4:00 a.m.

CVE-2002-1096

2002-10-0404:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cisco

vpn

concentrator

vulnerability

nvd

cve-2002-1096

6.3 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

74.1%

JSON

Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.1, allows restricted administrators to obtain user passwords that are stored in plaintext in HTML source code.

CPENameOperatorVersion
cisco:vpn_3000_concentrator_series_softwarecisco vpn 3000 concentrator series softwareeq2.0
cisco:vpn_3000_concentrator_series_softwarecisco vpn 3000 concentrator series softwareeq2.5.2.a
cisco:vpn_3000_concentrator_series_softwarecisco vpn 3000 concentrator series softwareeq2.5.2.b
cisco:vpn_3000_concentrator_series_softwarecisco vpn 3000 concentrator series softwareeq2.5.2.c
cisco:vpn_3000_concentrator_series_softwarecisco vpn 3000 concentrator series softwareeq2.5.2.d
cisco:vpn_3000_concentrator_series_softwarecisco vpn 3000 concentrator series softwareeq2.5.2.f
cisco:vpn_3000_concentrator_series_softwarecisco vpn 3000 concentrator series softwareeq3.0
cisco:vpn_3000_concentrator_series_softwarecisco vpn 3000 concentrator series softwareeq3.0\(rel\)
cisco:vpn_3000_concentrator_series_softwarecisco vpn 3000 concentrator series softwareeq3.0.3.a
cisco:vpn_3000_concentrator_series_softwarecisco vpn 3000 concentrator series softwareeq3.0.3.b

CPE	Name	Operator	Version
cisco:vpn_3000_concentrator_series_software	cisco vpn 3000 concentrator series software	eq	2.0
cisco:vpn_3000_concentrator_series_software	cisco vpn 3000 concentrator series software	eq	2.5.2.a
cisco:vpn_3000_concentrator_series_software	cisco vpn 3000 concentrator series software	eq	2.5.2.b
cisco:vpn_3000_concentrator_series_software	cisco vpn 3000 concentrator series software	eq	2.5.2.c
cisco:vpn_3000_concentrator_series_software	cisco vpn 3000 concentrator series software	eq	2.5.2.d
cisco:vpn_3000_concentrator_series_software	cisco vpn 3000 concentrator series software	eq	2.5.2.f
cisco:vpn_3000_concentrator_series_software	cisco vpn 3000 concentrator series software	eq	3.0
cisco:vpn_3000_concentrator_series_software	cisco vpn 3000 concentrator series software	eq	3.0\(rel\)
cisco:vpn_3000_concentrator_series_software	cisco vpn 3000 concentrator series software	eq	3.0.3.a
cisco:vpn_3000_concentrator_series_software	cisco vpn 3000 concentrator series software	eq	3.0.3.b

Rows per page:

1-10 of 171

References

www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml

www.iss.net/security_center/static/10019.php

www.securityfocus.com/bid/5611

6.3 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

74.1%

JSON

Related for CVE-2002-1096

nessus1