CVE-2000-1056

published 2000-12-11

CVE-2000-1056: CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to bypass LDAP authentication on the server if the LDAP server allows null passwords.

high 7.5 CVSS 3.1

AV N AC L Au N C P I P A P

CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to bypass LDAP authentication on the server if the LDAP server allows null passwords.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
cisco	secure_access_control_server	—	—
cisco	secure_access_control_server	—	—
cisco	secure_access_control_server	—	—