CVEvulnerability

CVE-2012-2498

4.0 MEDIUM Published 2012-08-06 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-08-06
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:H/Au:N/C:P/I:P/A:N
Weaknesses
CWE-287

Description

Cisco AnyConnect Secure Mobility Client 3.0 through 3.0.08066 does not ensure that authentication makes use of a legitimate certificate, which allows user-assisted man-in-the-middle attackers to spoof servers via a crafted certificate, aka Bug ID CSCtz29197.

Affected configurations

• cisco anyconnect secure mobility client 3.0 • cisco anyconnect secure mobility client 3.0.0629 • cisco anyconnect secure mobility client 3.0.07059 • cisco anyconnect secure mobility client 3.0.08057 • cisco anyconnect secure mobility client 3.0.08066

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References