CVE-2012-6606 | BDVDB-2026-57221 Detail

Description#

Palo Alto Networks GlobalProtect before 1.1.7, and NetConnect, does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof portal servers and obtain sensitive information via a crafted certificate.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://archives.neohapsis.com/archives/bugtraq/2012-10/0100.html
https://security.paloaltonetworks.com/CVE-2012-6606

Exploit#

No public exploit known

History#

Version 12013-08-31Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.