Unscored CVE-2014-3314 EUVD-2014-3327GHSA-mjm7-2w76-w36q

Cisco AnyConnect on Android and OS X does not properly verify the host type, which allows remote attackers to spoof authentication forms an…

Published Jan 14, 2015 · Updated Aug 6, 2024 · Assigned by cisco

Description

Cisco AnyConnect on Android and OS X does not properly verify the host type, which allows remote attackers to spoof authentication forms and possibly capture credentials via unspecified vectors, aka Bug IDs CSCuo24931 and CSCuo24940.

References

20150113 Cisco AnyConnect User Interface Dialog Rendered When Connecting to Arbitrary Hosts Vulnerability vendor-advisory