Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2012-3088

Overview

Vulnerability Score 9.3 9.3
CVE Id CVE-2012-3088
Last Modified 24 Jan 2013 11:53:55
Published 16 Sep 2012 06:34:50
Confidentiality Impact COMPLETE COMPLETE
Integrity Impact COMPLETE COMPLETE
Availability Impact COMPLETE COMPLETE
Access Vector NETWORK
Access Complexity MEDIUM
Authentication NONE

CVE-2012-3088

Summary

Cisco AnyConnect Secure Mobility Client 3.1.x before 3.1.00495, and 3.2.x, does not check whether an HTTP request originally contains ScanSafe headers, which allows remote attackers to have an unspecified impact via a crafted request, aka Bug ID CSCua13166.

Vulnerable Systems

Application

  • Cisco Anyconnect Secure Mobility Client 3.1.0

  • Cisco Anyconnect Secure Mobility Client 3.2.0


References

CONFIRM - http://www.cisco.com/en/US/docs/security/vpn_client/anyconnect/anyconnect31/release/notes/anyconnect31rn.html

XF - cisco-anyconnect-unspecified(78920)


Last Updated: 27 May 2016 11:00:42