CVE-2002-1554 in ONS15327
Summary
Cisco ONS15454 and ONS15327 running ONS before 3.4 stores usernames and passwords in cleartext in the image database for the TCC, TCC+ or XTC, which could allow attackers to gain privileges by obtaining the passwords from the image database or a backup.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Disclosure
03/31/2003
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 20253 | Cisco ONS15327/ONS15454 TCC/TCC+/XTC Password missing encryption | 311 | Not defined | Official fix | CVE-2002-1554 |