Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mjm7-2w76-w36q

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Cisco AnyConnect on Android and OS X does not properly verify the host type, which allows remote attackers to spoof authentication forms and possibly capture credentials via unspecified vectors, aka Bug IDs CSCuo24931 and CSCuo24940.

Cisco AnyConnect on Android and OS X does not properly verify the host type, which allows remote attackers to spoof authentication forms and possibly capture credentials via unspecified vectors, aka Bug IDs CSCuo24931 and CSCuo24940.

EPSS

Процентиль: 57%
0.00354
Низкий

Дефекты

CWE-20

Связанные уязвимости

nvd
около 11 лет назад

Cisco AnyConnect on Android and OS X does not properly verify the host type, which allows remote attackers to spoof authentication forms and possibly capture credentials via unspecified vectors, aka Bug IDs CSCuo24931 and CSCuo24940.

EPSS

Процентиль: 57%
0.00354
Низкий

Дефекты

CWE-20