Skip to content
OpenAdvisories
Unscored CVE-2002-0848 EUVD-2002-0840GHSA-8cqc-9wjh-xjr2

Cisco VPN 5000 series concentrator hardware 6.0.21.0002 and earlier, and 5.2.23.0003 and earlier, when using RADIUS with a challenge type o…

Published Apr 2, 2003 · Updated Aug 8, 2024 · Assigned by mitre

Description

Cisco VPN 5000 series concentrator hardware 6.0.21.0002 and earlier, and 5.2.23.0003 and earlier, when using RADIUS with a challenge type of Password Authentication Protocol (PAP) or Challenge, sends the user password in cleartext in a validation retry request, which could allow remote attackers to steal passwords via sniffing.

References