CVE-2004-1099

published 2005-01-10

CVE-2004-1099: Cisco Secure Access Control Server for Windows (ACS Windows) and Cisco Secure Access Control Server Solution Engine (ACS Solution Engine) 3.3.1, when the…

critical 10 CVSS 3.1

AV N AC L Au N C C I C A C

Cisco Secure Access Control Server for Windows (ACS Windows) and Cisco Secure Access Control Server Solution Engine (ACS Solution Engine) 3.3.1, when the EAP-TLS protocol is enabled, does not properly handle expired or untrusted certificates, which allows remote attackers to bypass authentication and gain unauthorized access via a "cryptographically correct" certificate with valid fields such as the username.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
cisco	secure	—	—
cisco	secure_access_control_server	—	—
cisco	secure_access_control_server	—	—