← Database

CVE-2002-1098

HIGH CVSS: 7.5 Published: 2002-10-04 Modified: 2026-06-16

Description

Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.3, adds an "HTTPS on Public Inbound (XML-Auto)(forward/in)" rule but sets the protocol to "ANY" when the XML filter configuration is enabled, which ultimately allows arbitrary traffic to pass through the concentrator.

Affected Platforms

Cisco Vpn 3002 Hardware ClientCisco Vpn 3000 Concentrator Series Software

Weakness Type

NVD-CWE-Other

References