CVE-2001-1024

CVE-2001-1024 describes a critical vulnerability in Entrust getAccess, where CGI scripts like login.gas.bat permit remote attackers to execute Java programs and potentially arbitrary commands. This is achieved by manipulating the -classpath argument. With a CVSS score of 7.5 (HIGH), the vulnerability is easily exploitable over the network with low attack complexity, leading to potential compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the CVE has garnered significant community discussion, indicating awareness and potential interest among security researchers.