Lucene search

[email protected]CVE-2000-0368

HistoryMay 07, 2001 - 4:00 a.m.

CVE-2000-0368

2001-05-0704:00:00

CWE-200

[email protected]

web.nvd.nist.gov

cisco

ios 9.1

access

attacker

sensitive data

command history.

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

JSON

Classic Cisco IOS 9.1 and later allows attackers with access to the login prompt to obtain portions of the command history of previous users, which may allow the attacker to access sensitive data.

Affected configurations

NVD

Node

ciscoiosRange≤9.1

CPENameOperatorVersion
cisco:ioscisco iosle9.1

CPE	Name	Operator	Version
cisco:ios	cisco ios	le	9.1

References

www.ciac.org/ciac/bulletins/j-009.shtml

www.cisco.com/warp/public/770/ioshist-pub.shtml

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

JSON

Related for CVE-2000-0368

nvd1 cvelist1