CVE Vulnerabilities

CVE-2012-1316

Improper Certificate Validation

Published: Jan 15, 2020 | Modified: Nov 21, 2024
CVSS 3.x
5.9
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

Cisco IronPort Web Security Appliance does not check for certificate revocation which could lead to MITM attacks

Weakness

The product does not validate, or incorrectly validates, a certificate.

Affected Software

NameVendorStart VersionEnd Version
Ironport_web_security_applianceCisco- (including)- (including)

Potential Mitigations

References