CVE-2012-6606: Medium severity palo alto networks globalprotect uwp app vulnerability
Published Aug 31, 2013
·Updated
Palo Alto Networks GlobalProtect before 1.1.7, and NetConnect, does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof portal servers and obtain sensitive information via a crafted certificate.
Affected Software
2 affected components
Palo Alto Networks GlobalProtect<=1.1.6
Palo Alto Networks Netconnect
Event History
Aug 31, 2013
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-6606?
The severity of CVE-2012-6606 is considered high due to its potential for man-in-the-middle attacks.
2
How do I fix CVE-2012-6606?
To fix CVE-2012-6606, update Palo Alto Networks GlobalProtect to version 1.1.7 or later.
3
Which versions of GlobalProtect are affected by CVE-2012-6606?
CVE-2012-6606 affects all versions of Palo Alto Networks GlobalProtect prior to version 1.1.7.
4
Can CVE-2012-6606 affect Palo Alto Networks NetConnect?
Yes, CVE-2012-6606 affects Palo Alto Networks NetConnect as well.
5
What kind of attack does CVE-2012-6606 enable?
CVE-2012-6606 enables man-in-the-middle attacks by allowing spoofing of portal servers.