CVE-2002-0236

Lucent VitalSuite 8.0 through 8.2, including VitalNet, VitalEvent, and VitalHelp/VitalAnalysis, allows remote attackers to bypass authentication via a direct HTTP request to the VsSetCookie.exe program, which returns a valid cookie for the desired user.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

7.41% chance of exploitation in the next 30 days, 94th percentile

Published

2002-05-03

Updated

2024-08-08

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/21203

References

• CVE Record
• NVD entry

Related

• CVE-2002-0231
• CVE-2002-0239
• CVE-2002-0230
• CVE-2002-0244
• CVE-2002-0229
• CVE-2002-0246