CVE-2002-1097

Cisco VPN 3000 Concentrator 2.2.x and 3.x < 3.5.2 - Authenticated Certificate Password Exposure via HTML Source Code

Title source: llm
STIX 2.1

Description

Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.2, allows restricted administrators to obtain certificate passwords that are stored in plaintext in the HTML source code for Certificate Management pages.

References (3)

Core 3
Core References
Vendor Advisory vendor-advisory x_refsource_cisco
http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/5612
Vendor Advisory vdb-entry x_refsource_xf
http://www.iss.net/security_center/static/10022.php

Scores

EPSS 0.0113
EPSS Percentile 63.1%

Details

Status published
Products (17)
cisco/vpn_3000_concentrator_series_software 2.0
cisco/vpn_3000_concentrator_series_software 2.5.2.a
cisco/vpn_3000_concentrator_series_software 2.5.2.b
cisco/vpn_3000_concentrator_series_software 2.5.2.c
cisco/vpn_3000_concentrator_series_software 2.5.2.d
cisco/vpn_3000_concentrator_series_software 2.5.2.f
cisco/vpn_3000_concentrator_series_software 3.0
cisco/vpn_3000_concentrator_series_software 3.0\(rel\)
cisco/vpn_3000_concentrator_series_software 3.0.3.a
cisco/vpn_3000_concentrator_series_software 3.0.3.b
... and 7 more
Published Oct 04, 2002
Tracked Since Feb 18, 2026