| Package | Affected versions | Patched versions |
|---|---|---|
| anyconnect secure mobility client | = 3.0= 3.0.0629= 3.0.07059 |
The IPsec implementation in Cisco AnyConnect Secure Mobility Client 3.0 before 3.0.08057 does not verify the certificate name in an X.509 certificate, which allows man-in-the-middle attackers to spoof servers via a crafted certificate, aka Bug ID CSCtz26985.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free