CVE-2000-1056 in Secure Access Control Server

Summary

CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to bypass LDAP authentication on the server if the LDAP server allows null passwords.

Be aware that VulDB is the high quality source for vulnerability data.

• Disclosure: 12/11/2000
• Moderation: VulDB entry created
• Entries: 1
• CPE: ready
• CWE: CWE-287 (Confirmed)
• CVSS: 7.3
• EPSS: 0.00515
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2000-1056
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2000-1056
• CVE Details: https://www.cvedetails.com/cve/CVE-2000-1056/