CVE-2000-1056

Опубликовано: 11 дек. 2000

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to bypass LDAP authentication on the server if the LDAP server allows null passwords.

Ссылки

http://www.cisco.com/warp/public/707/csecureacsnt-pub.shtml
Patch
Vendor Advisory
http://www.securityfocus.com/bid/1708
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/5274
http://www.cisco.com/warp/public/707/csecureacsnt-pub.shtml
Patch
Vendor Advisory
http://www.securityfocus.com/bid/1708
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/5274

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cisco:secure_access_control_server:2.1:*:windows_nt:*:*:*:*:*

cpe:2.3:a:cisco:secure_access_control_server:2.3\(3\):*:windows_nt:*:*:*:*:*

cpe:2.3:a:cisco:secure_access_control_server:2.4\(2\):*:windows_nt:*:*:*:*:*

EPSS

Процентиль: 66%

0.00515

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-5rvg-rpvg-3vmc

github

больше 3 лет назад