Vulnerability Details CVE-2004-0190
Symantec FireWall/VPN Appliance model 200 records a cleartext password for the password administration page, which may be cached on the administrator's local system or in a proxy, which allows attackers to steal the password and gain privileges.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 72.1%
CVSS Severity
CVSS v2 Score 7.5
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/017414.html
- http://marc.info/?l=bugtraq&m=107694794031839&w=2
- http://www.osvdb.org/4117
- http://www.securityfocus.com/bid/9784
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15212
- http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/017414.html
- http://marc.info/?l=bugtraq&m=107694794031839&w=2
- http://www.osvdb.org/4117
- http://www.securityfocus.com/bid/9784
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15212
Products affected by CVE-2004-0190
-
cpe:2.3:h:symantec:firewall_vpn_appliance_100:-
-
cpe:2.3:h:symantec:firewall_vpn_appliance_200:-
-
cpe:2.3:h:symantec:firewall_vpn_appliance_200r:-