CVE-2001-1105

CVE-2001-1105 describes a vulnerability in RSA BSAFE SSL-J versions 3.0, 3.0.1, and 3.1, as implemented in products like Cisco iCND 2.0. This flaw allows the software to cache session IDs from failed login attempts, enabling remote attackers to bypass SSL client authentication and access sensitive data by successfully logging in after an initial failure. The vulnerability is rated as HIGH severity with a CVSS score of 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P), indicating it can be exploited remotely with low attack complexity and without authentication, potentially leading to compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. The CVE has received no community discussion or media coverage, suggesting a low level of public awareness or interest.