Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.1, allows restricted administrators to obtain user passwords that are stored in plaintext in HTML source code.
References
Link | Resource |
---|---|
http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml | Vendor Advisory |
http://www.iss.net/security_center/static/10019.php | Vendor Advisory |
http://www.securityfocus.com/bid/5611 |
Configurations
Configuration 1 (hide)
AND |
|
Information
Published : 2002-10-03 21:00
Updated : 2018-10-30 09:26
NVD link : CVE-2002-1096
Mitre link : CVE-2002-1096
JSON object : View
CWE
Products Affected
cisco
- vpn_3002_hardware_client
- vpn_3000_concentrator_series_software