CVE-2002-1096: High severity Cisco Vpn 3000 Concentrator Series Software vulnerability
Published Oct 4, 2002
·Updated
Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.1, allows restricted administrators to obtain user passwords that are stored in plaintext in HTML source code.
Affected Software
17 affected components
Cisco Vpn 3000 Concentrator Series Software=2.0
Cisco Vpn 3000 Concentrator Series Software=2.5.2.a
Cisco Vpn 3000 Concentrator Series Software=2.5.2.b
Cisco Vpn 3000 Concentrator Series Software=2.5.2.c
Cisco Vpn 3000 Concentrator Series Software=2.5.2.d
Cisco Vpn 3000 Concentrator Series Software=2.5.2.f
Cisco Vpn 3000 Concentrator Series Software=3.0
Cisco Vpn 3000 Concentrator Series Software=3.0\(rel\)
Cisco Vpn 3000 Concentrator Series Software=3.0.3.a
Cisco Vpn 3000 Concentrator Series Software=3.0.3.b
Cisco Vpn 3000 Concentrator Series Software=3.0.4
Cisco Vpn 3000 Concentrator Series Software=3.1
Cisco Vpn 3000 Concentrator Series Software=3.1\(rel\)
Cisco Vpn 3000 Concentrator Series Software=3.1.1
Cisco Vpn 3000 Concentrator Series Software=3.1.2
Cisco Vpn 3000 Concentrator Series Software=3.5\(rel\)
Cisco Vpn 3002 Hardware Client
Event History
Oct 4, 2002
CVE Published
04:00 AM
Data Sourced
04:00 AM
DescriptionWeaknessAffected Software
Sep 1, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-1096?
CVE-2002-1096 is considered a medium severity vulnerability due to its potential to expose user passwords.
2
How do I fix CVE-2002-1096?
To address CVE-2002-1096, upgrade the Cisco VPN 3000 Concentrator to version 3.5.1 or later.
3
What systems are affected by CVE-2002-1096?
CVE-2002-1096 affects Cisco VPN 3000 Concentrator versions 2.2.x, 2.5.x, 3.0.x, and 3.1.x prior to 3.5.1.
4
What kind of data is impacted by CVE-2002-1096?
CVE-2002-1096 allows unauthorized access to user passwords that are stored in plaintext in HTML source code.
5
Is CVE-2002-1096 still a concern today?
While CVE-2002-1096 is an older vulnerability, systems still running affected versions remain at risk and should be promptly updated.