CVE-2001-1105 — Cisco Icdn vulnerability

3 documents3 sources
Severity
7.5HIGHNVD
EPSS
0.0%
top 88.79%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Cisco IcdnDell Bsafe Ssl-j
Timeline
PublishedSep 12
Latest updateApr 30

Description

RSA BSAFE SSL-J 3.0, 3.0.1 and 3.1, as used in Cisco iCND 2.0, caches session IDs from failed login attempts, which could allow remote attackers to bypass SSL client authentication and gain access to sensitive data by logging in after an initial failure.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages2 packages

▶NVDcisco/icdn2.0
▶NVDdell/bsafe_ssl-j3.0, 3.0.1, 3.1+2

Patches

Patch: www.ciac.org ↗Patch: www.securityfocus.com ↗Patch: www.ciac.org ↗

🔴Vulnerability Details

2
GHSA
GHSA-v6gx-f7j2-xxc7: RSA BSAFE SSL-J 3↗2022-04-30
▶
CVEList
CVE-2001-1105: RSA BSAFE SSL-J 3↗2002-03-15
▶
CVE-2001-1105 — Cisco Icdn vulnerability | cvebase