VULNERABILITY INTELLIGENCE

CVE-2001-1105

CVSS score7.5 HIGH
EPSS probability2.69%
CISA KEVNot currently listed
Published2001-09-12
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P

Description

RSA BSAFE SSL-J 3.0, 3.0.1 and 3.1, as used in Cisco iCND 2.0, caches session IDs from failed login attempts, which could allow remote attackers to bypass SSL client authentication and gain access to sensitive data by logging in after an initial failure.

Primary references