CVE-2000-0368

Published Mar 12, 2001

Last updated 3 months ago

Overview

Description: Classic Cisco IOS 9.1 and later allows attackers with access to the login prompt to obtain portions of the command history of previous users, which may allow the attacker to access sensitive data.
Source: cve@mitre.org
NVD status: Modified

Risk scores

CVSS 2.0

Type: Primary
Base score: 2.1
Impact score: 2.9
Exploitability score: 3.9
Vector string: AV:L/AC:L/Au:N/C:P/I:N/A:N

Weaknesses

nvd@nist.gov: CWE-200

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "91986F0D-94E5-4ED9-A98D-123C99FD43CE",
            "versionEndIncluding": "9.1"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References