Vulnerability Database

296,480

Total vulnerabilities in the database

CVE-2002-1096

Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.1, allows restricted administrators to obtain user passwords that are stored in plaintext in HTML source code.

Published: Oct 4, 2002
Updated: Apr 13, 2023
CVE: CVE-2002-1096
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
cisco / vpn_3000_concentrator_series_software	2.0	2.0.x
cisco / vpn_3000_concentrator_series_software	2.5.2.a	2.5.2.a.x
cisco / vpn_3000_concentrator_series_software	2.5.2.b	2.5.2.b.x
cisco / vpn_3000_concentrator_series_software	2.5.2.c	2.5.2.c.x
cisco / vpn_3000_concentrator_series_software	2.5.2.d	2.5.2.d.x
cisco / vpn_3000_concentrator_series_software	2.5.2.f	2.5.2.f.x
cisco / vpn_3000_concentrator_series_software	3.0	3.0.x
cisco / vpn_3000_concentrator_series_software	3.0(rel)	3.0(rel).x
cisco / vpn_3000_concentrator_series_software	3.0.3.a	3.0.3.a.x
cisco / vpn_3000_concentrator_series_software	3.0.3.b	3.0.3.b.x
cisco / vpn_3000_concentrator_series_software	3.0.4	3.0.4.x
cisco / vpn_3000_concentrator_series_software	3.1	3.1.x
cisco / vpn_3000_concentrator_series_software	3.1(rel)	3.1(rel).x
cisco / vpn_3000_concentrator_series_software	3.1.1	3.1.1.x
cisco / vpn_3000_concentrator_series_software	3.1.2	3.1.2.x
cisco / vpn_3000_concentrator_series_software	3.5(rel)	3.5(rel).x
cisco / vpn_3002_hardware_client	-	-

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime