Vulnerability in Cisco Secure Access Control Server

CVE-2002-0241

NDSAuth.DLL in Cisco Secure Authentication Control Server (ACS) 3.0.1 does not check the Expired or Disabled state of users in the Novell Directory Services (NDS), which could allow those users to authenticate to the server.

EPSS: 0.016 (73.6th percentile) — read the EPSS interpretation.

Affected products

Cisco Secure_access_control_server — versions 3.0.1
N/a — versions n/a

References

cve@mitre.org (Patch, vdb-entry, Vendor Advisory, x_refsource_XF)
cve@mitre.org (Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
cve@mitre.org (x_refsource_CISCO, vendor-advisory, Patch, Vendor Advisory)