CVE-2012-2498

2012-08-0617:00:00

cisco

www.cve.org

cisco

anyconnect

authentication

vulnerability

bug id

csctz29197

AI Score

6.3

Confidence

Low

EPSS

0.001

Percentile

35.5%

JSON

Cisco AnyConnect Secure Mobility Client 3.0 through 3.0.08066 does not ensure that authentication makes use of a legitimate certificate, which allows user-assisted man-in-the-middle attackers to spoof servers via a crafted certificate, aka Bug ID CSCtz29197.