CVE-2004-1099 — Cisco Secure Access Control Server for Windows (ACS Windows) and Cisco Secure Access Control Server Solution Engine (ACS Solution Engine) 3.3.1, when the EAP-TLS protocol is enabled, does not properly handle expired or untrusted certificates, which allows remote attackers to bypass authentication and gain unauthorized access via a "cryptographically correct" certificate with valid fields such as the username

Back Back to CVE browser

HIGH

Cisco Secure Access Control Server for Windows (ACS Windows) and Cisco Secure Access Control Server Solution Engine (ACS Solution Engine) 3.3.1, when the EAP-TLS protocol is enabled, does not properly handle expired or untrusted certificates, which allows remote attackers to bypass authentication and gain unauthorized access via a "cryptographically correct" certificate with valid fields such as the username

Published Dec 1, 2004

10.0

HIGH

CVSS 2.0

EPSS 10.20%

Description

Cisco Secure Access Control Server for Windows (ACS Windows) and Cisco Secure Access Control Server Solution Engine (ACS Solution Engine) 3.3.1, when the EAP-TLS protocol is enabled, does not properly handle expired or untrusted certificates, which allows remote attackers to bypass authentication and gain unauthorized access via a "cryptographically correct" certificate with valid fields such as the username.

Affected products

Remediation

No remediation recorded yet.

Metrics

10.20% 0.10195

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.10195

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (14 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	10.20% (0.10195)	95.53th	v5 (v2026.06.15)
Jun 15, 2026	10.20% (0.10195)	95.06th	v5 (v2026.06.15)
Oct 26, 2025	2.16% (0.02159)	83.67th	v4 (v2025.03.14)
Mar 30, 2025	10.73% (0.10730)	92.65th	v4 (v2025.03.14)
Mar 29, 2025	14.07% (0.14069)	90.61th	v4 (v2025.03.14)
Mar 17, 2025	11.05% (0.11048)	92.92th	v4 (v2025.03.14)
Dec 12, 2024	2.35% (0.02346)	90.17th	v3 (v2023.03.01)
Nov 8, 2023	2.35% (0.02346)	88.58th	v3 (v2023.03.01)
Mar 23, 2023	3.48% (0.03476)	90.03th	v3 (v2023.03.01)
Mar 7, 2023	21.27% (0.21270)	95.63th	v3 (v2023.03.01)
Mar 6, 2023	1.21% (0.01213)	66.61th	v2 (v2022.01.01)
Feb 17, 2023	1.21% (0.01213)	66.22th	v2 (v2022.01.01)
Apr 1, 2022	1.21% (0.01213)	64.21th	v2 (v2022.01.01)
Feb 4, 2022	1.21% (0.01213)	40.54th	v2 (v2022.01.01)

Weaknesses (0)

No CWE recorded.

References (4)

http://www.ciac.org/ciac/bulletins/p-028.shtml
third-party-advisorygovernment-resourcex_refsource_CIACPatchVendor Advisory
http://www.cisco.com/warp/public/707/cisco-sa-20041102-acs-eap-tls.shtml
vendor-advisoryx_refsource_CISCOVendor Advisory
http://www.securityfocus.com/bid/11577
vdb-entryx_refsource_BIDPatchVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/17936
vdb-entryx_refsource_XF

Link	Providers	Tags
http://www.ciac.org/ciac/bulletins/p-028.shtml		third-party-advisorygovernment-resourcex_refsource_CIACPatchVendor Advisory
http://www.cisco.com/warp/public/707/cisco-sa-20041102-acs-eap-tls.shtml		vendor-advisoryx_refsource_CISCOVendor Advisory
http://www.securityfocus.com/bid/11577		vdb-entryx_refsource_BIDPatchVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/17936		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Dec 1, 2004

Updated Aug 8, 2024

Reserved Nov 30, 2004

Link CVE-2004-1099

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2004-1099

Red Hat

Severity n/a

Public date n/a

Links CVE-2004-1099