CVE-2002-0236

Published: May 29, 2002Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Lucent VitalSuite 8.0 through 8.2, including VitalNet, VitalEvent, and VitalHelp/VitalAnalysis, allows remote attackers to bypass authentication via a direct HTTP request to the VsSetCookie.exe program, which returns a valid cookie for the desired user.

Affected (15)

Products: Lucent: Vitalanalysis, Vitalevent, Vitalhelp, Vitalnet, Vitalsuite

5 products

Configuration A

15 vulnerable

Vulnerable Software	Affected Versions
Lucent Vitalanalysis	Version 8.0
Lucent Vitalanalysis	Version 8.1
Lucent Vitalanalysis	Version 8.2
Lucent Vitalevent	Version 8.0
Lucent Vitalevent	Version 8.1
Lucent Vitalevent	Version 8.2
Lucent Vitalhelp	Version 8.0
Lucent Vitalhelp	Version 8.1
Lucent Vitalhelp	Version 8.2
Lucent Vitalnet	Version 8.0
Lucent Vitalnet	Version 8.1
Lucent Vitalnet	Version 8.2
Lucent Vitalsuite	Version 8.0
Lucent Vitalsuite	Version 8.1
Lucent Vitalsuite	Version 8.2