Description
Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.3, allows remote attackers to obtain potentially sensitive information without authentication by directly accessing certain HTML pages.
Affected products
- Cisco / vpn_3000_concentrator_series_software2.0 – 2.0
- Cisco / vpn_3000_concentrator_series_software2.5.2.a – 2.5.2.a
- Cisco / vpn_3000_concentrator_series_software2.5.2.b – 2.5.2.b
- Cisco / vpn_3000_concentrator_series_software2.5.2.c – 2.5.2.c
- Cisco / vpn_3000_concentrator_series_software2.5.2.d – 2.5.2.d
- Cisco / vpn_3000_concentrator_series_software2.5.2.f – 2.5.2.f
- Cisco / vpn_3000_concentrator_series_software3.0 – 3.0
- Cisco / vpn_3000_concentrator_series_software3.0(rel) – 3.0(rel)
- Cisco / vpn_3000_concentrator_series_software3.0.3.a – 3.0.3.a
- Cisco / vpn_3000_concentrator_series_software3.0.3.b – 3.0.3.b
- Cisco / vpn_3000_concentrator_series_software3.0.4 – 3.0.4
- Cisco / vpn_3000_concentrator_series_software3.1 – 3.1
- Cisco / vpn_3000_concentrator_series_software3.1(rel) – 3.1(rel)
- Cisco / vpn_3000_concentrator_series_software3.1.1 – 3.1.1
- Cisco / vpn_3000_concentrator_series_software3.1.2 – 3.1.2
- Cisco / vpn_3000_concentrator_series_software3.1.4 – 3.1.4
- Cisco / vpn_3000_concentrator_series_software3.5(rel) – 3.5(rel)
- Cisco / vpn_3000_concentrator_series_software3.5.1 – 3.5.1
- Cisco / vpn_3000_concentrator_series_software3.5.2 – 3.5.2
- Cisco / vpn_3002_hardware_client