| Package | Affected versions | Patched versions |
|---|---|---|
| anyconnect secure mobility client | = 3.0= 3.0.0629= 3.0.07059= 3.0.08057= 3.0.08066 |
Cisco AnyConnect Secure Mobility Client 3.0 through 3.0.08066 does not ensure that authentication makes use of a legitimate certificate, which allows user-assisted man-in-the-middle attackers to spoof servers via a crafted certificate, aka Bug ID CSCtz29197.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free