CVEvulnerability

CVE-2001-1105

7.5 HIGH Published 2001-09-12 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2001-09-12
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

RSA BSAFE SSL-J 3.0, 3.0.1 and 3.1, as used in Cisco iCND 2.0, caches session IDs from failed login attempts, which could allow remote attackers to bypass SSL client authentication and gain access to sensitive data by logging in after an initial failure.

Affected configurations

• cisco icdn 2.0 • dell bsafe ssl-j 3.0 • dell bsafe ssl-j 3.0.1 • dell bsafe ssl-j 3.1

References