CVE-2012-3094

The VPN downloader in the download_install component in Cisco AnyConnect Secure Mobility Client 3.1.x before 3.1.00495 on Linux accepts arbitrary X.509 server…

published September 16, 2012

CVSS
—
EPSS
1%
Percentile
63.0
In the wild
Unconfirmed
What it is

The VPN downloader in the download_install component in Cisco AnyConnect Secure Mobility Client 3.1.x before 3.1.00495 on Linux accepts arbitrary X.509 server certificates without user interaction, which allows remote attackers to obtain sensitive information via vectors involving an invalid certificate, aka Bug ID CSCua11967.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01015 · 63.0th percentile
Published
2012-09-16T10:00Z
EPSS history
Timeline
  • 16 SEP 10:00Z
    The VPN downloader in the download_install component in Cisco AnyConnect Secure Mobility Client 3.1.x before 3.1.00495 on Linux accepts arbitrary X.509 server…
    cvelistv5