Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in Avira Phantom VPN through 2.23.1 for macOS. The VPN client insecurely configures the operating system such that all IP traffic to the VPN server's IP address is sent in plaintext outside the VPN tunnel, even if this traffic is not generated by the VPN client, while simultaneously using plaintext DNS to look up the VPN server's IP address. This allows an adversary to trick the victim into sending traffic to arbitrary IP addresses in plaintext outside the VPN tunnel. NOTE: the tunnelcrack.mathyvanhoef.com website uses this CVE ID to refer more generally to "ServerIP attack, combined with DNS spoofing, that can leak traffic to an arbitrary IP address" rather than to only Avira Phantom VPN.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Cisco AnyConnect Secure Mobility Client 安全漏洞
Vulnerability Description
Cisco Anyconnect Secure Mobility Client是美国思科（Cisco）公司的一款用于安全连接的VPN客户端软件。 Cisco AnyConnect Secure Mobility Client 5.9.1.1662版本存在安全漏洞，该漏洞源于VPN 客户端不安全地配置操作系统，使得到 VPN 服务器 IP 地址的所有 IP 流量都以明文形式发送到 VPN 隧道之外，同时使用明文 DNS 查找 VPN 服务器的IP地址，攻击者利用该漏洞可以诱骗受害者将明文流量发送到 VPN
CVSS Information
N/A
Vulnerability Type
N/A