Cisco AnyConnect Secure Mobility Client Certificate Validation Security Bypass Vulnerabilities
BID:54826
Info
Cisco AnyConnect Secure Mobility Client Certificate Validation Security Bypass Vulnerabilities
| Bugtraq ID: | 54826 |
| Class: | Design Error |
| CVE: |
CVE-2012-2499 CVE-2012-2500 |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 06 2012 12:00AM |
| Updated: | Aug 06 2012 12:00AM |
| Credit: | Vendor reported the issue. |
| Vulnerable: |
Cisco AnyConnect Secure Mobility Client 3.0 Cisco AnyConnect Secure Mobility Client 2.5.3046 Cisco AnyConnect Secure Mobility Client 2.5.3041 Cisco AnyConnect Secure Mobility Client 2.5 Cisco AnyConnect Secure Mobility Client 2.3.254 Cisco AnyConnect Secure Mobility Client 2.3.185 Cisco AnyConnect Secure Mobility Client 2.3 |
| Not Vulnerable: | |
Discussion
Cisco AnyConnect Secure Mobility Client Certificate Validation Security Bypass Vulnerabilities
Cisco AnyConnect Secure Mobility Client is prone to multiple security-bypass vulnerabilities.
Successfully exploiting these issues allows attackers to perform man-in-the-middle attacks or impersonate trusted servers, which may aid in further attacks.
Cisco AnyConnect Secure Mobility Client is prone to multiple security-bypass vulnerabilities.
Successfully exploiting these issues allows attackers to perform man-in-the-middle attacks or impersonate trusted servers, which may aid in further attacks.