CVE-2012-1326

Cisco IronPort Web Security Appliance up to and including 7.5 does not validate the basic constraints of the certificate authority which could lead to MITM attacks

Score

CVSS 3.1 7.4 High

Status

Modified - psirt@cisco.com

Published

2020-01-15

Last modified

2024-11-15

Weaknesses

CWE-20

Affected products

• Ironport Web Security Appliance (Cisco)

References

• http://www.securityfocus.com/bid/52981
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20120412-CVE-2012-1326