Cisco ONS15454 and ONS15327 running ONS before 3.4 stores usernames and passwords in cleartext in the image database for the TCC, TCC+ or XTC, which could allow attackers to gain privileges by obtaining the passwords from the image database or a backup.
References
Link | Resource |
---|---|
http://www.cisco.com/warp/public/707/ons-multiple-vuln-pub.shtml | Patch Vendor Advisory |
http://www.iss.net/security_center/static/10506.php | Patch Vendor Advisory |
http://www.securityfocus.com/bid/6078 | Patch Vendor Advisory |
http://www.cisco.com/warp/public/707/ons-multiple-vuln-pub.shtml | Patch Vendor Advisory |
http://www.iss.net/security_center/static/10506.php | Patch Vendor Advisory |
http://www.securityfocus.com/bid/6078 | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
20 Nov 2024, 23:41
Type | Values Removed | Values Added |
---|---|---|
References | () http://www.cisco.com/warp/public/707/ons-multiple-vuln-pub.shtml - Patch, Vendor Advisory | |
References | () http://www.iss.net/security_center/static/10506.php - Patch, Vendor Advisory | |
References | () http://www.securityfocus.com/bid/6078 - Patch, Vendor Advisory |
Information
Published : 2003-03-31 05:00
Updated : 2024-11-20 23:41
NVD link : CVE-2002-1554
Mitre link : CVE-2002-1554
CVE.ORG link : CVE-2002-1554
JSON object : View
Products Affected
cisco
- optical_networking_systems_software
CWE