Description
The console in AirMagnet Enterprise before 7.5 build 6307 does not properly validate the Enterprise Server certificate, which allows remote attackers to read network traffic via a man-in-the-middle (MITM) attack, possibly related to the use of self-signed certificates.
References
- 29921 vdb-entry
- 20061018 Airmagnet management interfaces multiple vulnerabilities mailing-list
- 20602 vdb-entry
- 20061025 Web-style Wireless IDS attacks mailing-list
- 20061117 Re: Airmagnet management interfaces multiple vulnerabilities mailing-list
- 22475 third-party-advisory