CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2002-0236

Lucent VitalSuite 8.0 through 8.2, including VitalNet, VitalEvent, and VitalHelp/VitalAnalysis, allows remote attackers to bypass authentication via a direct HTTP request to the VsSetCookie.exe program, which returns a valid cookie for the desired user.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.073

EPSS Ranking 91.1%

CVSS Severity

CVSS v2 Score 7.5

References

Products affected by CVE-2002-0236

Lucent » Vitalanalysis » Version: 8.0

cpe:2.3:a:lucent:vitalanalysis:8.0
Lucent » Vitalanalysis » Version: 8.1

cpe:2.3:a:lucent:vitalanalysis:8.1
Lucent » Vitalanalysis » Version: 8.2

cpe:2.3:a:lucent:vitalanalysis:8.2
Lucent » Vitalevent » Version: 8.0

cpe:2.3:a:lucent:vitalevent:8.0
Lucent » Vitalevent » Version: 8.1

cpe:2.3:a:lucent:vitalevent:8.1
Lucent » Vitalevent » Version: 8.2

cpe:2.3:a:lucent:vitalevent:8.2
Lucent » Vitalhelp » Version: 8.0

cpe:2.3:a:lucent:vitalhelp:8.0
Lucent » Vitalhelp » Version: 8.1

cpe:2.3:a:lucent:vitalhelp:8.1
Lucent » Vitalhelp » Version: 8.2

cpe:2.3:a:lucent:vitalhelp:8.2
Lucent » Vitalnet » Version: 8.0

cpe:2.3:a:lucent:vitalnet:8.0
Lucent » Vitalnet » Version: 8.1

cpe:2.3:a:lucent:vitalnet:8.1
Lucent » Vitalnet » Version: 8.2

cpe:2.3:a:lucent:vitalnet:8.2
Lucent » Vitalsuite » Version: 8.0

cpe:2.3:a:lucent:vitalsuite:8.0
Lucent » Vitalsuite » Version: 8.1

cpe:2.3:a:lucent:vitalsuite:8.1
Lucent » Vitalsuite » Version: 8.2

cpe:2.3:a:lucent:vitalsuite:8.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2002-0236

Products

Pricing

Contact Us