CVE-2002-1098
- State
- Published
- Severity
- Not scored
- Published
- Sep 1, 2004
- Updated
- Aug 8, 2024
- Reserved
- Sep 6, 2002
Description
Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.3, adds an "HTTPS on Public Inbound (XML-Auto)(forward/in)" rule but sets the protocol to "ANY" when the XML filter configuration is enabled, which ultimately allows arbitrary traffic to pass through the concentrator.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 20020903 Cisco VPN 3000 Concentrator Multiple Vulnerabilitiesvendor-advisory
- 5614vdb-entry
- cisco-vpn-xml-filter(10023)vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.