CVE-2002-1097
First published: Fri Oct 04 2002(Updated: )
Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.2, allows restricted administrators to obtain certificate passwords that are stored in plaintext in the HTML source code for Certificate Management pages.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco VPN 3000 concentrator series software | =2.0 | |
| Cisco VPN 3000 concentrator series software | =2.5.2.a | |
| Cisco VPN 3000 concentrator series software | =2.5.2.b | |
| Cisco VPN 3000 concentrator series software | =2.5.2.c | |
| Cisco VPN 3000 concentrator series software | =2.5.2.d | |
| Cisco VPN 3000 concentrator series software | =2.5.2.f | |
| Cisco VPN 3000 concentrator series software | =3.0 | |
| Cisco VPN 3000 concentrator series software | =3.0\(rel\) | |
| Cisco VPN 3000 concentrator series software | =3.0.3.a | |
| Cisco VPN 3000 concentrator series software | =3.0.3.b | |
| Cisco VPN 3000 concentrator series software | =3.0.4 | |
| Cisco VPN 3000 concentrator series software | =3.1 | |
| Cisco VPN 3000 concentrator series software | =3.1\(rel\) | |
| Cisco VPN 3000 concentrator series software | =3.1.1 | |
| Cisco VPN 3000 concentrator series software | =3.1.2 | |
| Cisco VPN 3000 concentrator series software | =3.5\(rel\) | |
| Cisco VPN 3002 Hardware Client |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2002-1097?
CVE-2002-1097 has been rated as a moderate severity vulnerability.
How do I fix CVE-2002-1097?
To fix CVE-2002-1097, you should upgrade your Cisco VPN 3000 Concentrator to version 3.5.2 or later.
What impact does CVE-2002-1097 have on Cisco VPN 3000 Concentrator?
CVE-2002-1097 allows restricted administrators to access certificate passwords stored in plaintext, which could lead to unauthorized access.
Which versions of Cisco VPN 3000 Concentrator are affected by CVE-2002-1097?
CVE-2002-1097 affects Cisco VPN 3000 Concentrator versions 2.2.x and 3.x prior to version 3.5.2.
Is there a workaround for CVE-2002-1097?
While upgrading is the best solution, limiting access to the Certificate Management pages may serve as a temporary workaround for CVE-2002-1097.
- collector/nvd-historical
- agent/type
- agent/first-publish-date
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/weakness
- agent/severity
- agent/last-modified-date
- agent/description
- agent/author
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco vpn 3000 concentrator series software
- version/cisco vpn 3000 concentrator series software/2.0
- version/cisco vpn 3000 concentrator series software/2.5.2.a
- version/cisco vpn 3000 concentrator series software/2.5.2.b
- version/cisco vpn 3000 concentrator series software/2.5.2.c
- version/cisco vpn 3000 concentrator series software/2.5.2.d
- version/cisco vpn 3000 concentrator series software/2.5.2.f
- version/cisco vpn 3000 concentrator series software/3.0
- version/cisco vpn 3000 concentrator series software/3.0\(rel\)
- version/cisco vpn 3000 concentrator series software/3.0.3.a
- version/cisco vpn 3000 concentrator series software/3.0.3.b
- version/cisco vpn 3000 concentrator series software/3.0.4
- version/cisco vpn 3000 concentrator series software/3.1
- version/cisco vpn 3000 concentrator series software/3.1\(rel\)
- version/cisco vpn 3000 concentrator series software/3.1.1
- version/cisco vpn 3000 concentrator series software/3.1.2
- version/cisco vpn 3000 concentrator series software/3.5\(rel\)
- canonical/cisco vpn 3002 hardware client