CVE-2012-2498

CVE-2012-2498 affects Cisco AnyConnect Secure Mobility Client 3.0–3.0.08066, where authentication may accept crafted certificates, allowing user-assisted or unauthenticated MITM to spoof servers due to insufficient certificate validation (Bug CSCtz29197). Cisco issued the advisory Cisco-SA-201208...