Lucene search
HistorySep 16, 2012 - 10:34 a.m.
CVE-2012-3088
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
6.7
Confidence
Low
EPSS
0.004
Percentile
74.2%
Cisco AnyConnect Secure Mobility Client 3.1.x before 3.1.00495, and 3.2.x, does not check whether an HTTP request originally contains ScanSafe headers, which allows remote attackers to have an unspecified impact via a crafted request, aka Bug ID CSCua13166.
Affected configurations
Node
ciscoanyconnect_secure_mobility_clientMatch3.1.0
ORciscoanyconnect_secure_mobility_clientMatch3.2.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | anyconnect_secure_mobility_client | 3.1.0 | cpe:2.3:a:cisco:anyconnect_secure_mobility_client:3.1.0:*:*:*:*:*:*:* |
| cisco | anyconnect_secure_mobility_client | 3.2.0 | cpe:2.3:a:cisco:anyconnect_secure_mobility_client:3.2.0:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2012-3088
2012-09-16 10:00:00
prion
prion
Design/Logic Flaw
2012-09-16 10:34:00
cve
cve
CVE-2012-3088
2012-09-16 10:34:50
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
6.7
Confidence
Low
EPSS
0.004
Percentile
74.2%
Related for NVD:CVE-2012-3088