Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A vulnerability in the certificate management subsystem of Cisco AnyConnect Network Access Manager and of Cisco AnyConnect Secure Mobility Client for iOS, Mac OS X, Android, Windows, and Linux could allow an unauthenticated, remote attacker to bypass the TLS certificate check when downloading certain configuration files. The vulnerability is due to improper use of Simple Certificate Enrollment Protocol and improper server certificate validation. An attacker could exploit this vulnerability by preparing malicious profile and localization files for Cisco AnyConnect to use. A successful exploit could allow the attacker to remotely change the configuration profile, a certificate, or the localization data used by AnyConnect Secure Mobility Client. Cisco Bug IDs: CSCvh23141.
CVSS Information
N/A
Vulnerability Type
证书验证不恰当
Vulnerability Title
Cisco AnyConnect Network Access Manager和AnyConnect Secure Mobility Client 安全特征问题漏洞
Vulnerability Description
Cisco AnyConnect Network Access Manager和AnyConnect Secure Mobility Client都是美国思科（Cisco）公司的产品。Cisco Network Access Manager(NAM)是其中的一个网络访问管理器。AnyConnect Secure Mobility Client是一款可通过任何设备安全访问网络和应用的安全移动客户端。 基于iOS、Mac OS X、Android、Windows和Linux平台的Cisco AnyConnec
CVSS Information
N/A
Vulnerability Type
N/A