medium4.0
CVE-2012-2498
Cisco AnyConnect Secure Mobility Client 3.0 through 3.0.08066 does not ensure that authentication makes use of a legitimate certificate, which allows user-assi…
Impact
Cisco AnyConnect Secure Mobility Client 3.0 through 3.0.08066 does not ensure that authentication makes use of a legitimate certificate, which allows user-assisted man-in-the-middle attackers to spoof servers via a crafted certificate, aka Bug ID CSCtz29197.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Anyconnect Secure Mobility Client | Versions 3.0, 3.0.0629, 3.0.07059, 3.0.08057, 3.0.08066 |