Lucene search

K
nvd[email protected]NVD:CVE-2002-0160
HistoryApr 22, 2002 - 4:00 a.m.

CVE-2002-0160

2002-04-2204:00:00
web.nvd.nist.gov
5

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.6

Confidence

Low

EPSS

0.003

Percentile

71.5%

The administration function in Cisco Secure Access Control Server (ACS) for Windows, 2.6.x and earlier and 3.x through 3.01 (build 40), allows remote attackers to read HTML, Java class, and image files outside the web root via a ….. (modified …) in the URL to port 2002.

Affected configurations

Nvd
Node
ciscosecure_access_control_serverMatch2.6
OR
ciscosecure_access_control_serverMatch2.6.2
OR
ciscosecure_access_control_serverMatch2.6.3
OR
ciscosecure_access_control_serverMatch2.6.4
OR
ciscosecure_access_control_serverMatch3.0
OR
ciscosecure_access_control_serverMatch3.0.1
VendorProductVersionCPE
ciscosecure_access_control_server2.6cpe:2.3:a:cisco:secure_access_control_server:2.6:*:*:*:*:*:*:*
ciscosecure_access_control_server2.6.2cpe:2.3:a:cisco:secure_access_control_server:2.6.2:*:*:*:*:*:*:*
ciscosecure_access_control_server2.6.3cpe:2.3:a:cisco:secure_access_control_server:2.6.3:*:*:*:*:*:*:*
ciscosecure_access_control_server2.6.4cpe:2.3:a:cisco:secure_access_control_server:2.6.4:*:*:*:*:*:*:*
ciscosecure_access_control_server3.0cpe:2.3:a:cisco:secure_access_control_server:3.0:*:*:*:*:*:*:*
ciscosecure_access_control_server3.0.1cpe:2.3:a:cisco:secure_access_control_server:3.0.1:*:*:*:*:*:*:*

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.6

Confidence

Low

EPSS

0.003

Percentile

71.5%

Related for NVD:CVE-2002-0160