CVE-2012-0334: Input Validation
Cisco IronPort Web Security Appliance AsyncOS software prior to 7.5 has a SSL Certificate Caching vulnerability which could allow man-in-the-middle attacks
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2012-0334.
What is the title of the vulnerability?
The title of the vulnerability is 'Cisco IronPort Web Security Appliance AsyncOS software prior to 7.5 has a SSL Certificate Caching vulnerability'.
What is the severity of CVE-2012-0334?
The severity of CVE-2012-0334 is medium with a CVSS score of 6.4.
What is the affected software?
The affected software is the Cisco IronPort Web Security Appliance with AsyncOS software prior to version 7.5.
What is the description of the vulnerability?
The vulnerability allows for SSL Certificate Caching, which could potentially lead to man-in-the-middle attacks.
How can I fix CVE-2012-0334?
Upgrade to Cisco IronPort Web Security Appliance AsyncOS software version 7.5 or higher to mitigate this vulnerability.
Where can I find more information about CVE-2012-0334?
You can find more information about this vulnerability at the following references: [http://www.securityfocus.com/bid/52981](http://www.securityfocus.com/bid/52981) and [https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20120412-CVE-2012-0334](https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20120412-CVE-2012-0334).