CVE-2002-0241

Опубликовано: 29 мая 2002

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

NDSAuth.DLL in Cisco Secure Authentication Control Server (ACS) 3.0.1 does not check the Expired or Disabled state of users in the Novell Directory Services (NDS), which could allow those users to authenticate to the server.

Ссылки

http://www.cisco.com/warp/public/707/ciscosecure-acs-nds-authentication-vuln-pub.shtml
Patch
Vendor Advisory
http://www.iss.net/security_center/static/8106.php
Patch
Vendor Advisory
http://www.securityfocus.com/bid/4048
Patch
Vendor Advisory
http://www.cisco.com/warp/public/707/ciscosecure-acs-nds-authentication-vuln-pub.shtml
Patch
Vendor Advisory
http://www.iss.net/security_center/static/8106.php
Patch
Vendor Advisory
http://www.securityfocus.com/bid/4048
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:cisco:secure_access_control_server:3.0.1:*:windows_nt:*:*:*:*:*

EPSS

Процентиль: 41%

0.00189

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-fc5v-r7j2-4w95

github

почти 4 года назад