Cisco SSL/TLS Certificate and SSH Public Key Validation Vulnerability

Cisco Security Monitoring and Response System (CS-MARS) and Adaptive Security Device Manager (ASDM) are prone to a vulnerability regarding validating SSL/TLS certificates and SSH public keys.

An attacker could exploit this issue to retrieve potentially sensitive information or to impersonate a managed device.

This issue is tracked by Cisco Bug IDs CSCsf95930 and CSCsg78595.


 

Privacy Statement
Copyright 2010, SecurityFocus