CVE-2002-1097 in VPN 3000 Concentrator

Riassunto

di MITRE

Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.2, allows restricted administrators to obtain certificate passwords that are stored in plaintext in the HTML source code for Certificate Management pages.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Divulgazione: 04/10/2002
• Moderazione: accettato
• Voce: VDB-19009
• CPE: pronto
• CWE: CWE-200 (confermato)
• CVSS: 7.5 (NVD)
• EPSS: 0.01133
• KEV: no
• Attività: molto basso
• Settore: Homeoffice, Finance, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2002-1097
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2002-1097
• CVE Details: https://www.cvedetails.com/cve/CVE-2002-1097/