Password Exposure Vulnerability in Cisco VPN Concentrator

CVE-2002-1096

Summary

The Cisco VPN 3000 Concentrator suffers from a vulnerability that permits restricted administrators to access user passwords, as these are stored in plaintext format within the HTML source code. This exposes sensitive information, allowing unauthorized access to user accounts and potential compromise of the affected systems. Products in the 2.2.x and 3.x versions prior to 3.5.1 are notably at risk, highlighting the need for immediate patching and adherence to security best practices.

References