CVE-2012-1326

  • Last update: Apr 13, 2023

Description

Cisco IronPort Web Security Appliance up to and including 7.5 does not validate the basic constraints of the certificate authority which could lead to MITM attacks

Software From Fixed in
cisco / ironport_web_security_appliance - 7.5.x

Details

    • Severity: High
  • CVE: CVE-2012-1326
  • Published: Jan 15, 2020
  • Updated: Apr 13, 2023
  • Exploit:

CVSS v3

  • Severity: High
  • Score: 7.4
  • AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

CVSS v2

  • Severity: Medium
  • Score: 5.8
  • AV:N/AC:M/Au:N/C:P/I:P/A:N

CWEs