CVE-2012-2498

Cisco AnyConnect Secure Mobility Client 3.0 through 3.0.08066 does not ensure that authentication makes use of a legitimate certificate, which allows…

published August 6, 2012

CVSS
—
EPSS
0%
Percentile
40.3
In the wild
Unconfirmed
What it is

Cisco AnyConnect Secure Mobility Client 3.0 through 3.0.08066 does not ensure that authentication makes use of a legitimate certificate, which allows user-assisted man-in-the-middle attackers to spoof servers via a crafted certificate, aka Bug ID CSCtz29197.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00482 · 40.3th percentile
Published
2012-08-06T17:00Z
EPSS history
Timeline
  • 06 AUG 17:00Z
    Cisco AnyConnect Secure Mobility Client 3.0 through 3.0.08066 does not ensure that authentication makes use of a legitimate certificate, which allows…
    cvelistv5