CVE:CVE-2002-1096
CNNVD:CNNVD-200210-142
Cisco VPN 3000 Concentrator 3.5.1之前的2.2.x，和3.x版本存在漏洞。受限制的管理员利用该漏洞可以获取以明文方式存储在HTML源代码中的用户密码。
solution:Upgrade cisco vpn_3000_concentrator_series_software to a higher version than 2.0,2.5.2.a,2.5.2.b,2.5.2.c,2.5.2.d,2.5.2.f,3.0,3.0(rel,3.0.3.a,3.0.3.b,3.0.4,3.1,3.1(rel,3.1.1,3.1.2,3.5(rel,and avoid the version 2.0,2.5.2.a,2.5.2.b,2.5.2.c,2.5.2.d,2.5.2.f,3.0,3.0(rel),3.0.3.a,3.0.3.b,3.0.4,3.1,3.1(rel),3.1.1,3.1.2,3.5(rel); Upgrade cisco vpn_3002_hardware_client to a higher version than *