Unscored severity · published Sep 12, 2001
CVE-2001-1105
RSA BSAFE SSL-J 3.0, 3.0.1 and 3.1, as used in Cisco iCND 2.0, caches session IDs from failed login attempts, which could allow remote attackers to bypass SSL client…
–
CVSS
2.7%
EPSS
No
On KEV
Description
RSA BSAFE SSL-J 3.0, 3.0.1 and 3.1, as used in Cisco iCND 2.0, caches session IDs from failed login attempts, which could allow remote attackers to bypass SSL client authentication and gain access to sensitive data by logging in after an initial failure.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.7% · higher than 86% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BS
Bsafe Ssl-j · Dell
3.0; 3.0.1; 3.1 · source: NVD
IC
Icdn · Cisco
2.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2001-1105
CVE.org
https://www.cve.org/CVERecord?id=CVE-2001-1105
Patch
http://www.ciac.org/ciac/bulletins/l-141.shtml
www.cisco.com
http://www.cisco.com/warp/public/707/SSL-J-pub.html
www.rsasecurity.com
http://www.rsasecurity.com/products/bsafe/bulletins/BSAFE_SSL-J_3.x.SecurityBulletin.html
Patch
http://www.securityfocus.com/bid/3329
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/7112