Unrated severityNVD Advisory· Published Sep 12, 2001· Updated Apr 16, 2026

CVE-2001-1105

Description

RSA BSAFE SSL-J 3.0, 3.0.1 and 3.1, as used in Cisco iCND 2.0, caches session IDs from failed login attempts, which could allow remote attackers to bypass SSL client authentication and gain access to sensitive data by logging in after an initial failure.

Affected products

Cisco Systems, Inc./Icdn
cpe:2.3:a:cisco:icdn:2.0:*:*:*:*:*:*:*
Dell/Bsafe Ssl J3 versions
cpe:2.3:a:dell:bsafe_ssl-j:3.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:dell:bsafe_ssl-j:3.0:*:*:*:*:*:*:*
- cpe:2.3:a:dell:bsafe_ssl-j:3.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:dell:bsafe_ssl-j:3.1:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.ciac.org/ciac/bulletins/l-141.shtmlnvdPatchVendor Advisory
www.securityfocus.com/bid/3329nvdPatchVendor Advisory
www.cisco.com/warp/public/707/SSL-J-pub.htmlnvd
www.rsasecurity.com/products/bsafe/bulletins/BSAFE_SSL-J_3.x.SecurityBulletin.htmlnvd
exchange.xforce.ibmcloud.com/vulnerabilities/7112nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000