Unscored CVE-2012-6606 EUVD-2012-6453GHSA-j4r7-wx6h-r3mw

Palo Alto Networks GlobalProtect before 1.1.7, and NetConnect, does not verify X.509 certificates from SSL servers, which allows man-in-the…

Published Aug 31, 2013 · Updated Aug 6, 2024 · Assigned by mitre

Description

Palo Alto Networks GlobalProtect before 1.1.7, and NetConnect, does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof portal servers and obtain sensitive information via a crafted certificate.

References

20121017 MitM-vulnerability in Palo Alto Networks GlobalProtect mailing-list
https://security.paloaltonetworks.com/CVE-2012-6606