Security Advisory

CVE-2012-2499

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2012-08-06 17:00:00

Last updated 2024-09-17 01:06:42

Assigner cisco

State PUBLISHED

Description

The IPsec implementation in Cisco AnyConnect Secure Mobility Client 3.0 before 3.0.08057 does not verify the certificate name in an X.509 certificate, which allows man-in-the-middle attackers to spoof servers via a crafted certificate, aka Bug ID CSCtz26985.

← Browse all CVEs View on cve.org ↗