Описание
Cisco AnyConnect on Android and OS X does not properly verify the host type, which allows remote attackers to spoof authentication forms and possibly capture credentials via unspecified vectors, aka Bug IDs CSCuo24931 and CSCuo24940.
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:*:*:*:*:*:android:*:*
Конфигурация 2
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:*:*:*:*:*:macos:*:*
EPSS
Процентиль: 57%
0.00354
Низкий
5 Medium
CVSS2
Дефекты
CWE-20
Связанные уязвимости
github
больше 3 лет назад
Cisco AnyConnect on Android and OS X does not properly verify the host type, which allows remote attackers to spoof authentication forms and possibly capture credentials via unspecified vectors, aka Bug IDs CSCuo24931 and CSCuo24940.
EPSS
Процентиль: 57%
0.00354
Низкий
5 Medium
CVSS2
Дефекты
CWE-20