CVE-2002-1097: High severity Cisco Vpn 3000 Concentrator Series Software vulnerability
Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.2, allows restricted administrators to obtain certificate passwords that are stored in plaintext in the HTML source code for Certificate Management pages.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2002-1097?
CVE-2002-1097 has been rated as a moderate severity vulnerability.
How do I fix CVE-2002-1097?
To fix CVE-2002-1097, you should upgrade your Cisco VPN 3000 Concentrator to version 3.5.2 or later.
What impact does CVE-2002-1097 have on Cisco VPN 3000 Concentrator?
CVE-2002-1097 allows restricted administrators to access certificate passwords stored in plaintext, which could lead to unauthorized access.
Which versions of Cisco VPN 3000 Concentrator are affected by CVE-2002-1097?
CVE-2002-1097 affects Cisco VPN 3000 Concentrator versions 2.2.x and 3.x prior to version 3.5.2.
Is there a workaround for CVE-2002-1097?
While upgrading is the best solution, limiting access to the Certificate Management pages may serve as a temporary workaround for CVE-2002-1097.