CVE-2002-1097

Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.2, allows restricted administrators to obtain certificate passwords that are stored in plaintext in the HTML source code for Certificate Management pages.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml	Vendor Advisory
http://www.iss.net/security_center/static/10022.php	Vendor Advisory
http://www.securityfocus.com/bid/5612

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.0:::::::*
	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.a:::::::*
	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.b:::::::*
	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.c:::::::*
	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.d:::::::*
	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.f:::::::*
	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0:::::::*
	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0\(rel\):::::::*
	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.3.a:::::::*
	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.3.b:::::::*
	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.4:::::::*
	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1:::::::*
	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1\(rel\):::::::*
	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.1:::::::*
	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.2:::::::*
	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5\(rel\):::::::*

cpe:2.3:a:cisco:vpn_3002_hardware_client:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2002-10-04 04:00

Updated : 2024-02-28 10:24

NVD link : CVE-2002-1097

Mitre link : CVE-2002-1097

CVE.ORG link : CVE-2002-1097

JSON object : View

Products Affected

cisco

vpn_3002_hardware_client
vpn_3000_concentrator_series_software

CWE

NVD-CWE-Other

{"id": "CVE-2002-1097", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": true, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2002-10-04T04:00:00.000", "references": [{"url": "http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.iss.net/security_center/static/10022.php", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/5612", "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.2, allows restricted administrators to obtain certificate passwords that are stored in plaintext in the HTML source code for Certificate Management pages."}], "lastModified": "2018-10-30T16:26:19.043", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "923949D1-06EC-462F-A3BC-FCAB448042A2"}, {"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "901B1838-7169-41E5-80EF-29BB680BF937"}, {"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.b:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CDAEAA5F-0A98-48B7-8012-9B9909243135"}, {"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.c:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "11DA4B03-2D30-4514-9DF5-5F0DDD4B8DC8"}, {"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.d:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CB38834B-E4AB-43F4-888B-14B088C95594"}, {"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.f:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "23F8059B-3968-4D63-B1B3-74E545C918D1"}, {"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "701CDA0D-F932-4251-B484-8F20F0AE9003"}, {"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0\\(rel\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "93500B0E-5EE6-49C1-AD66-3AB007020B8B"}, {"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.3.a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E674AA43-905E-40E0-A70F-77D05C62C18D"}, {"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.3.b:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3F0D767F-7142-46D2-B3E4-7FE8E9E3285A"}, {"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "057A6BA0-5F5E-4FC4-B2EC-A17968EAC2C8"}, {"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "645AB682-2965-4C8D-B323-AB510E424407"}, {"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1\\(rel\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "76F7F019-A0A4-49CD-BB28-24BF7725AC89"}, {"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "175CD875-3402-4B06-A3FA-7DFFCBB44056"}, {"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AF61B8A5-31E7-40F5-8B3D-CA90E50618AD"}, {"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5\\(rel\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "207034E8-35F7-4E78-A3FC-C86D20EB8D9A"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cisco:vpn_3002_hardware_client:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "12ECF578-84BF-4F41-9462-C09FA517F2A0"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}