CVE-2002-0938: High severity Cisco Secure Access Control Server vulnerability
Published Oct 4, 2002
·Updated
Cross-site scripting vulnerability in CiscoSecure ACS 3.0 allows remote attackers to execute arbitrary script or HTML as other web users via the action argument in a link to setup.exe.
Affected Software
2 affected components
Cisco Secure Access Control Server=3.0.1
Cisco Secure Access Control Server=3.0
Event History
Oct 4, 2002
CVE Published
04:00 AM
Apr 2, 2003
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-0938?
CVE-2002-0938 is considered a medium severity vulnerability due to its potential for cross-site scripting attacks.
2
How does CVE-2002-0938 impact Cisco Secure ACS?
CVE-2002-0938 allows remote attackers to execute arbitrary script or HTML on behalf of other web users, compromising their data.
3
How do I fix CVE-2002-0938?
To fix CVE-2002-0938, upgrade Cisco Secure Access Control Server to version 3.0.1 or later.
4
What versions of Cisco Secure ACS are affected by CVE-2002-0938?
CVE-2002-0938 affects Cisco Secure Access Control Server versions 3.0 and 3.0.1.
5
Can CVE-2002-0938 be exploited remotely?
Yes, CVE-2002-0938 can be exploited remotely by attackers through malicious links.