Vulnerability in Cisco Secure Access Control Server

CVE-2000-1056

CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to bypass LDAP authentication on the server if the LDAP server allows null passwords.

EPSS: 0.017 (74.7th percentile) — read the EPSS interpretation.

Affected products

Cisco Secure_access_control_server — versions 2.1, 2.3\(3\), 2.4\(2\)
N/a — versions n/a

References

cve@mitre.org (x_refsource_CISCO, vendor-advisory, Patch, Vendor Advisory)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (Patch, vdb-entry, x_refsource_BID, Vendor Advisory)