CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 9.0
CWE Name:  Permissions Privileges and Access Controls
Summary: microsoft internet security and acceleration (isa) server 2006 gold and sp1, when radius otp is enabled, uses the http-basic authentication method, which allows remote attackers to gain the privileges of an arbitrary account, and access published web pages, via vectors involving attempted access to a network resource behind the isa server, aka "radius otp bypass vulnerability."
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2009-07-15
Last Modified Date: 2018-10-12