{"api_version":"1","generated_at":"2026-07-23T09:15:59+00:00","cve":"CVE-2008-3815","urls":{"html":"https://cve.report/CVE-2008-3815","api":"https://cve.report/api/cve/CVE-2008-3815.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2008-3815","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2008-3815"},"summary":{"title":"CVE-2008-3815","description":"Unspecified vulnerability in Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.0 before 7.0(8)3, 7.1 before 7.1(2)78, 7.2 before 7.2(4)16, 8.0 before 8.0(4)6, and 8.1 before 8.1(1)13, when configured as a VPN using Microsoft Windows NT Domain authentication, allows remote attackers to bypass VPN authentication via unknown vectors.","state":"PUBLISHED","assigner":"cisco","published_at":"2008-10-23 22:00:01","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-287","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.vupen.com/english/advisories/2008/2899","name":"http://www.vupen.com/english/advisories/2008/2899","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/32360","name":"http://secunia.com/advisories/32360","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Cisco ASA and PIX VPN Authentication Bypass - Secunia Advisories - Vulnerability Intelligence - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securitytracker.com/id?1021089","name":"http://www.securitytracker.com/id?1021089","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Cisco ASA Windows NT Domain Authentication Bug Lets Remote Users Bypass IPSec/SSL VPN Authentication - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5983","name":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5983","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Repository  /  Oval Repository","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securitytracker.com/id?1021090","name":"http://www.securitytracker.com/id?1021090","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Cisco PIX Firewall Windows NT Domain Authentication Bug Lets Remote Users Bypass IPSec/SSL VPN Authentication - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46024","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46024","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a183ba.shtml","name":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a183ba.shtml","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Cisco Security Advisory: Multiple Vulnerabilities in Cisco PIX and Cisco ASA - Cisco Systems","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/31864","name":"http://www.securityfocus.com/bid/31864","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Cisco PIX and ASA Windows NT Domain VPN Authentication Bypass Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-3815","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-3815","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2008","cve_id":"3815","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"cisco","cpe5":"asa_5500","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3815","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"cisco","cpe5":"pix","cpe6":"7.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3815","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"cisco","cpe5":"pix","cpe6":"7.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3815","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"cisco","cpe5":"pix","cpe6":"7.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3815","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"cisco","cpe5":"pix","cpe6":"8.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3815","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"cisco","cpe5":"pix","cpe6":"8.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T09:53:00.408Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"1021090","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id?1021090"},{"name":"oval:org.mitre.oval:def:5983","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"],"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5983"},{"name":"31864","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/31864"},{"name":"32360","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/32360"},{"name":"1021089","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id?1021089"},{"name":"cisco-pix-asa-ntdomain-authentication-bypass(46024)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46024"},{"name":"20081022 Multiple Vulnerabilities in Cisco PIX and Cisco ASA","tags":["vendor-advisory","x_refsource_CISCO","x_transferred"],"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a183ba.shtml"},{"name":"ADV-2008-2899","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2008/2899"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2008-10-22T00:00:00.000Z","descriptions":[{"lang":"en","value":"Unspecified vulnerability in Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.0 before 7.0(8)3, 7.1 before 7.1(2)78, 7.2 before 7.2(4)16, 8.0 before 8.0(4)6, and 8.1 before 8.1(1)13, when configured as a VPN using Microsoft Windows NT Domain authentication, allows remote attackers to bypass VPN authentication via unknown vectors."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-09-28T12:57:01.000Z","orgId":"d1c1063e-7a18-46af-9102-31f8928bc633","shortName":"cisco"},"references":[{"name":"1021090","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id?1021090"},{"name":"oval:org.mitre.oval:def:5983","tags":["vdb-entry","signature","x_refsource_OVAL"],"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5983"},{"name":"31864","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/31864"},{"name":"32360","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/32360"},{"name":"1021089","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id?1021089"},{"name":"cisco-pix-asa-ntdomain-authentication-bypass(46024)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46024"},{"name":"20081022 Multiple Vulnerabilities in Cisco PIX and Cisco ASA","tags":["vendor-advisory","x_refsource_CISCO"],"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a183ba.shtml"},{"name":"ADV-2008-2899","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2008/2899"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@cisco.com","ID":"CVE-2008-3815","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Unspecified vulnerability in Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.0 before 7.0(8)3, 7.1 before 7.1(2)78, 7.2 before 7.2(4)16, 8.0 before 8.0(4)6, and 8.1 before 8.1(1)13, when configured as a VPN using Microsoft Windows NT Domain authentication, allows remote attackers to bypass VPN authentication via unknown vectors."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"1021090","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1021090"},{"name":"oval:org.mitre.oval:def:5983","refsource":"OVAL","url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5983"},{"name":"31864","refsource":"BID","url":"http://www.securityfocus.com/bid/31864"},{"name":"32360","refsource":"SECUNIA","url":"http://secunia.com/advisories/32360"},{"name":"1021089","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1021089"},{"name":"cisco-pix-asa-ntdomain-authentication-bypass(46024)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46024"},{"name":"20081022 Multiple Vulnerabilities in Cisco PIX and Cisco ASA","refsource":"CISCO","url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a183ba.shtml"},{"name":"ADV-2008-2899","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2008/2899"}]}}}},"cveMetadata":{"assignerOrgId":"d1c1063e-7a18-46af-9102-31f8928bc633","assignerShortName":"cisco","cveId":"CVE-2008-3815","datePublished":"2008-10-23T21:00:00.000Z","dateReserved":"2008-08-27T00:00:00.000Z","dateUpdated":"2024-08-07T09:53:00.408Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2008-10-23 22:00:01","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-287","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:asa_5500:*:*:*:*:*:*:*:*","matchCriteriaId":"6FCBA3A3-7C8F-481A-9BEC-78981547F8BE"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:pix:7.0:*:*:*:*:*:*:*","matchCriteriaId":"508DECFB-F334-409F-911B-BF8D842D3556"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:pix:7.1:*:*:*:*:*:*:*","matchCriteriaId":"C4991BC7-B07D-4D8C-885C-136AD9D4E209"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:pix:7.2:*:*:*:*:*:*:*","matchCriteriaId":"85B161D0-D78B-4517-88AC-3A110F13C154"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:pix:8.0:*:*:*:*:*:*:*","matchCriteriaId":"35649F68-BD09-4684-925D-620D99B42CE8"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:pix:8.1:*:*:*:*:*:*:*","matchCriteriaId":"E32C602C-E278-4DA2-B7D0-941FABA9ADC0"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2008","CveId":"3815","Ordinal":"1","Title":"CVE-2008-3815","CVE":"CVE-2008-3815","Year":"2008"},"notes":[{"CveYear":"2008","CveId":"3815","Ordinal":"1","NoteData":"Unspecified vulnerability in Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.0 before 7.0(8)3, 7.1 before 7.1(2)78, 7.2 before 7.2(4)16, 8.0 before 8.0(4)6, and 8.1 before 8.1(1)13, when configured as a VPN using Microsoft Windows NT Domain authentication, allows remote attackers to bypass VPN authentication via unknown vectors.","Type":"Description","Title":"CVE-2008-3815"},{"CveYear":"2008","CveId":"3815","Ordinal":"2","NoteData":"2008-10-23","Type":"Other","Title":"Published"},{"CveYear":"2008","CveId":"3815","Ordinal":"3","NoteData":"2017-09-28","Type":"Other","Title":"Modified"}]}}}