Total vulnerabilities in the database
Cisco AnyConnect Secure Mobility Client 3.0 through 3.0.08066 does not ensure that authentication makes use of a legitimate certificate, which allows user-assisted man-in-the-middle attackers to spoof servers via a crafted certificate, aka Bug ID CSCtz29197.
| Software | From | Fixed in |
|---|---|---|
| cisco / anyconnect_secure_mobility_client | 3.0 | 3.0.x |
| cisco / anyconnect_secure_mobility_client | 3.0.08057 | 3.0.08057.x |
| cisco / anyconnect_secure_mobility_client | 3.0.0629 | 3.0.0629.x |
| cisco / anyconnect_secure_mobility_client | 3.0.07059 | 3.0.07059.x |
| cisco / anyconnect_secure_mobility_client | 3.0.08066 | 3.0.08066.x |