Unscored severity · published May 29, 2002
CVE-2002-0236
Lucent VitalSuite 8.0 through 8.2, including VitalNet, VitalEvent, and VitalHelp/VitalAnalysis, allows remote attackers to bypass authentication via a direct HTTP request to the…
–
CVSS
7.4%
EPSS
No
On KEV
Description
Lucent VitalSuite 8.0 through 8.2, including VitalNet, VitalEvent, and VitalHelp/VitalAnalysis, allows remote attackers to bypass authentication via a direct HTTP request to the VsSetCookie.exe program, which returns a valid cookie for the desired user.
Exploitation
Is it being used?
Exploit prediction (EPSS)7.4% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VI
Vitalanalysis · Lucent
8.0; 8.1; 8.2 · source: NVD
VI
Vitalevent · Lucent
8.0; 8.1; 8.2 · source: NVD
VI
Vitalhelp · Lucent
8.0; 8.1; 8.2 · source: NVD
VI
Vitalnet · Lucent
8.0; 8.1; 8.2 · source: NVD
VI
Vitalsuite · Lucent
8.0; 8.1; 8.2 · source: NVD