CVE-2002-1099

Cisco VPN 3000 Concentrator 2.2.x and 3.x < 3.5.3 - Unauthenticated Information Disclosure via Direct HTML Page Access

Title source: llm
STIX 2.1

Description

Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.3, allows remote attackers to obtain potentially sensitive information without authentication by directly accessing certain HTML pages.

References (3)

Core 3
Core References
Vendor Advisory vendor-advisory x_refsource_cisco
http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/5616
Vendor Advisory vdb-entry x_refsource_xf
http://www.iss.net/security_center/static/10024.php

Scores

EPSS 0.0150
EPSS Percentile 71.7%

Details

Status published
Products (20)
cisco/vpn_3000_concentrator_series_software 2.0
cisco/vpn_3000_concentrator_series_software 2.5.2.a
cisco/vpn_3000_concentrator_series_software 2.5.2.b
cisco/vpn_3000_concentrator_series_software 2.5.2.c
cisco/vpn_3000_concentrator_series_software 2.5.2.d
cisco/vpn_3000_concentrator_series_software 2.5.2.f
cisco/vpn_3000_concentrator_series_software 3.0
cisco/vpn_3000_concentrator_series_software 3.0\(rel\)
cisco/vpn_3000_concentrator_series_software 3.0.3.a
cisco/vpn_3000_concentrator_series_software 3.0.3.b
... and 10 more
Published Oct 04, 2002
Tracked Since Feb 18, 2026