← Voltar para CVEs

CVE-2001-1105

N/A

Descricao

RSA BSAFE SSL-J 3.0, 3.0.1 and 3.1, as used in Cisco iCND 2.0, caches session IDs from failed login attempts, which could allow remote attackers to bypass SSL client authentication and gain access to sensitive data by logging in after an initial failure.

Detalhes CVE

Pontuacao CVSS v3.1N/A

Publicado9/12/2001

Ultima modificacao4/16/2026

Fontenvd

Avistamentos honeypot0

Produtos afetados

cisco:icdndell:bsafe_ssl-j

Referencias

http://www.ciac.org/ciac/bulletins/l-141.shtml(cve@mitre.org)

http://www.cisco.com/warp/public/707/SSL-J-pub.html(cve@mitre.org)

http://www.rsasecurity.com/products/bsafe/bulletins/BSAFE_SSL-J_3.x.SecurityBulletin.html(cve@mitre.org)

http://www.securityfocus.com/bid/3329(cve@mitre.org)

https://exchange.xforce.ibmcloud.com/vulnerabilities/7112(cve@mitre.org)

http://www.ciac.org/ciac/bulletins/l-141.shtml(af854a3a-2127-422b-91ae-364da2661108)

http://www.cisco.com/warp/public/707/SSL-J-pub.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.rsasecurity.com/products/bsafe/bulletins/BSAFE_SSL-J_3.x.SecurityBulletin.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/3329(af854a3a-2127-422b-91ae-364da2661108)

https://exchange.xforce.ibmcloud.com/vulnerabilities/7112(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.