{"api_version":"1","generated_at":"2026-07-23T10:12:38+00:00","cve":"CVE-2002-1491","urls":{"html":"https://cve.report/CVE-2002-1491","api":"https://cve.report/api/cve/CVE-2002-1491.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2002-1491","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2002-1491"},"summary":{"title":"CVE-2002-1491","description":"The Cisco VPN 5000 Client for MacOS before 5.2.2 records the most recently used login password in plaintext when saving \"Default Connection\" settings, which could allow local users to gain privileges.","state":"PUBLISHED","assigner":"mitre","published_at":"2003-04-02 05:00:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.securityfocus.com/bid/5736","name":"http://www.securityfocus.com/bid/5736","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"Cisco Mac OS VPN 5000 Client Password Disclosure Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.osvdb.org/7041","name":"http://www.osvdb.org/7041","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.cisco.com/warp/public/707/vpn5k-client-multiple-vuln-pub.shtml","name":"http://www.cisco.com/warp/public/707/vpn5k-client-multiple-vuln-pub.shtml","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"Cisco Security Advisory: Cisco VPN 5000 Client Multiple Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.iss.net/security_center/static/10129.php","name":"http://www.iss.net/security_center/static/10129.php","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"ISS X-Force Database: cisco-vpn5000-defaultconnection-password (10129): Cisco VPN 5000 Client software \"Default Connection\" plaintext password","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2002-1491","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2002-1491","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2002","cve_id":"1491","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"vpn_5000_client","cpe6":"5.1.2","cpe7":"*","cpe8":"macos","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2002","cve_id":"1491","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"vpn_5000_client","cpe6":"5.2.1","cpe7":"*","cpe8":"macos","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-08T03:26:28.702Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"20020918 Cisco VPN 5000 Client Multiple Vulnerabilities","tags":["vendor-advisory","x_refsource_CISCO","x_transferred"],"url":"http://www.cisco.com/warp/public/707/vpn5k-client-multiple-vuln-pub.shtml"},{"name":"5736","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/5736"},{"name":"cisco-vpn5000-defaultconnection-password(10129)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"http://www.iss.net/security_center/static/10129.php"},{"name":"7041","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/7041"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2002-09-18T00:00:00.000Z","descriptions":[{"lang":"en","value":"The Cisco VPN 5000 Client for MacOS before 5.2.2 records the most recently used login password in plaintext when saving \"Default Connection\" settings, which could allow local users to gain privileges."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2004-08-18T00:00:00.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"20020918 Cisco VPN 5000 Client Multiple Vulnerabilities","tags":["vendor-advisory","x_refsource_CISCO"],"url":"http://www.cisco.com/warp/public/707/vpn5k-client-multiple-vuln-pub.shtml"},{"name":"5736","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/5736"},{"name":"cisco-vpn5000-defaultconnection-password(10129)","tags":["vdb-entry","x_refsource_XF"],"url":"http://www.iss.net/security_center/static/10129.php"},{"name":"7041","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/7041"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2002-1491","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The Cisco VPN 5000 Client for MacOS before 5.2.2 records the most recently used login password in plaintext when saving \"Default Connection\" settings, which could allow local users to gain privileges."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"20020918 Cisco VPN 5000 Client Multiple Vulnerabilities","refsource":"CISCO","url":"http://www.cisco.com/warp/public/707/vpn5k-client-multiple-vuln-pub.shtml"},{"name":"5736","refsource":"BID","url":"http://www.securityfocus.com/bid/5736"},{"name":"cisco-vpn5000-defaultconnection-password(10129)","refsource":"XF","url":"http://www.iss.net/security_center/static/10129.php"},{"name":"7041","refsource":"OSVDB","url":"http://www.osvdb.org/7041"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2002-1491","datePublished":"2004-09-01T04:00:00.000Z","dateReserved":"2003-02-05T00:00:00.000Z","dateUpdated":"2024-08-08T03:26:28.702Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2003-04-02 05:00:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_5000_client:5.1.2:*:macos:*:*:*:*:*","matchCriteriaId":"FF8AFE02-B175-4989-ABF3-1B59DA6B5F71"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_5000_client:5.2.1:*:macos:*:*:*:*:*","matchCriteriaId":"4E897D07-0789-495B-BD1B-E2129192E856"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2002","CveId":"1491","Ordinal":"1","Title":"CVE-2002-1491","CVE":"CVE-2002-1491","Year":"2002"},"notes":[{"CveYear":"2002","CveId":"1491","Ordinal":"1","NoteData":"The Cisco VPN 5000 Client for MacOS before 5.2.2 records the most recently used login password in plaintext when saving \"Default Connection\" settings, which could allow local users to gain privileges.","Type":"Description","Title":"CVE-2002-1491"},{"CveYear":"2002","CveId":"1491","Ordinal":"2","NoteData":"2004-09-01","Type":"Other","Title":"Published"},{"CveYear":"2002","CveId":"1491","Ordinal":"3","NoteData":"2004-08-17","Type":"Other","Title":"Modified"}]}}}