Cisco VPN Concentrator HTTP Error Page Device Information Leakage Vulnerability

Cisco VPN Concentrator HTTP Error Page Device Information Leakage Vulnerability

Cisco VPN 3000 series concentrators are a family of products for facilitating secure communications via VPN (Virtual Private Networks).

Under some circumstances, it may be possible for a remote user to gain access to sensitive information. The HTTP error page reveals more information than necessary when an erroneous page is visited. This could lead to intelligence gathering, and a directed attack against network resources.