CVE-2012-2500
CVE-2012-2500
Cisco AnyConnect Secure Mobility Client 3.0 before 3.0.08057 does not verify the certificate name in an X.509 certificate during WebLaunch of IPsec, which allows man-in-the-middle attackers to spoof servers via a crafted certificate, aka Bug ID CSCtz29470.
Affected products
n/a · n/aWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →