← Database

CVE-2002-0848

MEDIUM CVSS: 5.0 Published: 2002-08-12 Modified: 2026-06-16

Description

Cisco VPN 5000 series concentrator hardware 6.0.21.0002 and earlier, and 5.2.23.0003 and earlier, when using RADIUS with a challenge type of Password Authentication Protocol (PAP) or Challenge, sends the user password in cleartext in a validation retry request, which could allow remote attackers to steal passwords via sniffing.

Affected Platforms

Cisco Vpn 5000 Concentrator Series SoftwareCisco Vpn 5000 Concentrator

Weakness Type

NVD-CWE-Other

References