Vulnerabilites related to Cisco - IronPort Web Security Appliance AsyncOS
CVE-2012-0334 (GCVE-0-2012-0334)
Vulnerability from cvelistv5
Published
2020-01-15 12:49
Modified
2024-11-15 17:48
Severity ?
EPSS score ?
Summary
Cisco IronPort Web Security Appliance AsyncOS software prior to 7.5 has a SSL Certificate Caching vulnerability which could allow man-in-the-middle attacks
References
▼ | URL | Tags |
---|---|---|
http://www.securityfocus.com/bid/52981 | x_refsource_MISC | |
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20120412-CVE-2012-0334 | x_refsource_CONFIRM |
Impacted products
Vendor | Product | Version | ||
---|---|---|---|---|
Cisco | IronPort Web Security Appliance AsyncOS |
Version: prior to 7.5 |
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-06T18:23:30.515Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_refsource_MISC", "x_transferred", ], url: "http://www.securityfocus.com/bid/52981", }, { tags: [ "x_refsource_CONFIRM", "x_transferred", ], url: "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20120412-CVE-2012-0334", }, ], title: "CVE Program Container", }, { metrics: [ { other: { content: { id: "CVE-2012-0334", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "total", }, ], role: "CISA Coordinator", timestamp: "2024-11-15T16:25:16.136811Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-11-15T17:48:52.761Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { product: "IronPort Web Security Appliance AsyncOS", vendor: "Cisco", versions: [ { status: "affected", version: "prior to 7.5", }, ], }, ], descriptions: [ { lang: "en", value: "Cisco IronPort Web Security Appliance AsyncOS software prior to 7.5 has a SSL Certificate Caching vulnerability which could allow man-in-the-middle attacks", }, ], problemTypes: [ { descriptions: [ { description: "Security Bypass", lang: "en", type: "text", }, ], }, ], providerMetadata: { dateUpdated: "2020-01-15T12:49:13", orgId: "d1c1063e-7a18-46af-9102-31f8928bc633", shortName: "cisco", }, references: [ { tags: [ "x_refsource_MISC", ], url: "http://www.securityfocus.com/bid/52981", }, { tags: [ "x_refsource_CONFIRM", ], url: "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20120412-CVE-2012-0334", }, ], x_legacyV4Record: { CVE_data_meta: { ASSIGNER: "psirt@cisco.com", ID: "CVE-2012-0334", STATE: "PUBLIC", }, affects: { vendor: { vendor_data: [ { product: { product_data: [ { product_name: "IronPort Web Security Appliance AsyncOS", version: { version_data: [ { version_value: "prior to 7.5", }, ], }, }, ], }, vendor_name: "Cisco", }, ], }, }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "eng", value: "Cisco IronPort Web Security Appliance AsyncOS software prior to 7.5 has a SSL Certificate Caching vulnerability which could allow man-in-the-middle attacks", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "eng", value: "Security Bypass", }, ], }, ], }, references: { reference_data: [ { name: "http://www.securityfocus.com/bid/52981", refsource: "MISC", url: "http://www.securityfocus.com/bid/52981", }, { name: "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20120412-CVE-2012-0334", refsource: "CONFIRM", url: "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20120412-CVE-2012-0334", }, ], }, }, }, }, cveMetadata: { assignerOrgId: "d1c1063e-7a18-46af-9102-31f8928bc633", assignerShortName: "cisco", cveId: "CVE-2012-0334", datePublished: "2020-01-15T12:49:13", dateReserved: "2012-01-04T00:00:00", dateUpdated: "2024-11-15T17:48:52.761Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }