Lucene search

CiscoCVELIST:CVE-2012-6399

HistoryMay 27, 2013 - 2:00 p.m.

CVE-2012-6399

2013-05-2714:00:00

cisco

www.cve.org

cisco

webex

ios

ssl

spoofing

vulnerability

x.509

certificate

man-in-the-middle

attackers

bug id

cscud94176

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

39.9%

JSON

Cisco WebEx 4.1 on iOS does not verify that the server hostname matches a domain name in the subject’s Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, aka Bug ID CSCud94176.

References

secunia.com/advisories/51412