CVEvulnerability

CVE-2012-3088

9.3 HIGH Published 2012-09-16 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-09-16
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Cisco AnyConnect Secure Mobility Client 3.1.x before 3.1.00495, and 3.2.x, does not check whether an HTTP request originally contains ScanSafe headers, which allows remote attackers to have an unspecified impact via a crafted request, aka Bug ID CSCua13166.

Affected configurations

• cisco anyconnect secure mobility client 3.1.0 • cisco anyconnect secure mobility client 3.2.0

References