CVE-2014-3314

CVE-2014-3314 affects Cisco AnyConnect Secure Mobility Client on Android and OS X. The root cause is insufficient validation of the host type to which AnyConnect connects, allowing an attacker to present a malicious host and cause the client to render a crafted authentication form to harvest cred...