Lucene search
MitreCVE-2004-0190HistorySep 01, 2004 - 4:00 a.m.
CVE-2004-0190
2004-09-0104:00:00
mitre
web.nvd.nist.gov
26
symantec
firewall
vpn
appliance
cleartext password
attack
privileges
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.1
Confidence
Low
EPSS
0.001
Percentile
47.9%
Symantec FireWall/VPN Appliance model 200 records a cleartext password for the password administration page, which may be cached on the administrator’s local system or in a proxy, which allows attackers to steal the password and gain privileges.
Affected configurations
Node
symantecfirewall_vpn_appliance_100
ORsymantecfirewall_vpn_appliance_200
ORsymantecfirewall_vpn_appliance_200r
| Vendor | Product | Version | CPE |
|---|---|---|---|
| symantec | firewall_vpn_appliance_100 | * | cpe:2.3:h:symantec:firewall_vpn_appliance_100:*:*:*:*:*:*:*:* |
| symantec | firewall_vpn_appliance_200 | * | cpe:2.3:h:symantec:firewall_vpn_appliance_200:*:*:*:*:*:*:*:* |
| symantec | firewall_vpn_appliance_200r | * | cpe:2.3:h:symantec:firewall_vpn_appliance_200r:*:*:*:*:*:*:*:* |
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.1
Confidence
Low
EPSS
0.001
Percentile
47.9%
Related for CVE-2004-0190